CVE-2023-45283 Insecure parsing of Windows paths with a \??\ prefix in path/filepath

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New CVEs Address Path Traversal Vulnerabilities in Windows Two vulnerabilities affecting Windows path parsing have been reported. CVE-2022-41722, published on February 28, 2023, involves a path traversal issue, while CVE-2023-45283, published on November 9, 2023, concerns insecure parsing of Windows paths with a \??\ prefix. Both vulnerabilities could potentially allow unauthorized access to system files. 2 sources 39