CVE-2023-29366

{"id": "CVE-2023-29366", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2023-06-14T00:15:10.417", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29366", "tags": ["Patch", "Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-415"}]}], "descriptions": [{"lang": "en", "value": "Windows Geolocation Service Remote Code Execution Vulnerability"}], "lastModified": "2024-05-29T02:15:43.530", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "E8102C71-9DCE-469D-B4D5-26617C955DBC", "versionEndExcluding": "10.0.19044.3087"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "E0F3398C-7C4B-4297-85A3-3E8EB9A8A11A", "versionEndExcluding": "10.0.19044.3087"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "2C9ADB92-B335-4FEB-A902-7E0B64437D8A", "versionEndExcluding": "10.0.19044.3087"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "690CB61E-C65F-4F3C-A82E-96F3DF4FA25C", "versionEndExcluding": "10.0.19045.3087"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "8AE28877-7C04-4EF6-9727-CFEDFAAEFB49", "versionEndExcluding": "10.0.19045.3087"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "8B3DF61B-DCBB-4FB0-A0EF-1E5829941C45", "versionEndExcluding": "10.0.19045.3087"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "3C51F6A7-2518-4DF2-93E7-4C19914F4063", "versionEndExcluding": "10.0.22000.2057"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "FFAF133F-F2A1-4BCC-B901-5C0A775BEC81", "versionEndExcluding": "10.0.22000.2057"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "886BF41E-670B-4B8B-ACDE-EB5C3C25EDC3", "versionEndExcluding": "10.0.22621.1848"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "0D900723-68F0-4973-BE03-41A261869D6D", "versionEndExcluding": "10.0.22621.1848"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}