CVE-2023-36905

Published: Aug 8, 2023Modified: Aug 10, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

Affected (11)

Products: Microsoft: Windows 10, Windows 10 1607, Windows 10 1809, Windows 10 21h2, Windows 10 22h2, Windows 11 21h2, Windows 11 22h2, Windows Server 2016, Windows Server 2019

9 products

Windows 10 1607

Windows 10 1809

Windows 10 21h2

Windows 10 22h2

Windows 11 21h2

Windows 11 22h2

Windows Server 2016

Windows Server 2019

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 10	version < 10.0.10240.20107
Microsoft Windows 10 1607	version < 10.0.14393.6167
Microsoft Windows 10 1809	version < 10.0.17763.4737
Microsoft Windows 10 21h2	version < 10.0.19044.3324
Microsoft Windows 10 22h2	version < 10.0.19045.3324
Microsoft Windows 11 21h2	version < 10.0.22000.2295
Microsoft Windows 11 21h2	version < 10.0.22000.2295
Microsoft Windows 11 22h2	version < 10.0.22621.2134
Microsoft Windows 11 22h2	version < 10.0.22621.2134
Microsoft Windows Server 2016	All versions
Microsoft Windows Server 2019	All versions

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36905

Source: secure@microsoft.com

PatchVendor Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36905

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.