CVE-2023-1048

Katalog CVE

CVSS 7.8 · High EPSS 0,57%

Kerentanan Improper Initialization pada techpowerup dram calculator for ryzen. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5. This issue affects some unknown processing in the library WinRing0x64.sys. The manipulation leads to improper initialization. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221807.

Rincian

Terbit di NVD

26 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-665: Improper Initialization

EPSS (30 hari)

0,57% peluang dieksploitasi; lebih tinggi dari 45,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1048 exploit · advisory pihak ketiga
• https://vuldb.com/?ctiid.221807 permissions required · advisory pihak ketiga
• https://vuldb.com/?id.221807 permissions required · advisory pihak ketiga