CVE-2023-36906: Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.21503Patch KB5029304 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.22216Patch KB5029301 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.26664Patch KB5029307 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.24414Patch KB5029308 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.6167Patch KB5029242 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.20107Patch KB5029259 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.3324Patch KB5029244 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.2134Patch KB5029263 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.2295Patch KB5029253 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.1906Fixed in 10.0.20348.1903Patch KB5029367 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.3324Patch KB5029244 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.4737Patch KB5029247
Event History
Frequently Asked Questions
What is the severity of CVE-2023-36906?
CVE-2023-36906 has been assigned a severity rating of Medium by Microsoft.
How do I fix CVE-2023-36906?
To fix CVE-2023-36906, apply the provided security updates from Microsoft for the affected versions of Windows.
What products are affected by CVE-2023-36906?
CVE-2023-36906 affects various versions of Windows 10, Windows 11, and Windows Server including specific builds of Windows 10 22H2 and Windows Server 2022.
What type of vulnerability is CVE-2023-36906?
CVE-2023-36906 is classified as an Information Disclosure Vulnerability within Windows Cryptographic Services.
Can CVE-2023-36906 be exploited remotely?
Yes, CVE-2023-36906 can potentially be exploited by an attacker to gain unauthorized access to sensitive information.