CVE-2023-36906

MediumCVSS 5.5

Published: 08/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.96%

78th percentile - higher than 78% of all known CVEs

Summary

A vulnerability in Windows Cryptographic Services allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.

Risk Assessment

Information disclosure could lead to further attacks on the system, including data theft or breaches of user privacy.

Recommendation

It is recommended to update Windows to the latest version to patch this vulnerability and to monitor the system for unauthorized access.

Original NVD description (English source)

Windows Cryptographic Services Information Disclosure Vulnerability