CVE-2023-38140: Windows Kernel Information Disclosure Vulnerability
Published Sep 12, 2023
·Updated
Windows Kernel Information Disclosure Vulnerability
Affected Software
31 affected componentsFixes available
Microsoft Windows Server 2016
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows 10 1607<10.0.14393.6252
Microsoft Windows 10 1809<10.0.17763.4851
Microsoft Windows 10 21h2<10.0.19045.3448
Microsoft Windows 10 22h2<10.0.19045.3448
Microsoft Windows 11 21h2<10.0.22000.2416
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=1607
Microsoft Windows 10=1607
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10 21h2<10.0.19044.3448
Microsoft Windows Server 2016<10.0.14393.6252
Microsoft Windows Server 2019<10.0.17763.4851
Microsoft Windows Server 2022<10.0.20348.1970
Remediation
Event History
Sep 12, 2023
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·04:58 PM
Data Sourced
via MITRE·04:58 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-38140?
CVE-2023-38140 is a Windows Kernel Information Disclosure Vulnerability.
2
What is the severity of CVE-2023-38140?
The severity of CVE-2023-38140 is high.
3
How does CVE-2023-38140 affect Windows systems?
CVE-2023-38140 affects Windows 10 (1809), Windows 10 (21H2), Windows Server 2016, Windows Server 2019, and Windows Server 2022.
4
How can I fix CVE-2023-38140 on my Windows system?
To fix CVE-2023-38140, apply the relevant patches provided by Microsoft.
5
Where can I find more information about CVE-2023-38140?
You can find more information about CVE-2023-38140 on the Microsoft Security Response Center website.