Main Vulnerability Database Vulnerabilities #VU75016

Security features bypass in Microsoft Windows and Windows Server - CVE-2023-28235

Published: April 12, 2023

Vulnerability identifier: #VU75016

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-28235

CWE-ID: CWE-254

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to compromise the target system.

The vulnerability exists due to security features bypass in Windows Lock Screen. An attacker with physical access can bypass the Windows Lock Screen security feature.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2023-28235

Install updates from vendor's website.

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-28235

Related Security Bulletins