cve.bz

CVE-2023-42757

4.2 mediumEPSS 0.3%

Medium (4.2). EPSS 0.3% chance of exploitation in the next 30 days.

Process Explorer before 17.04 allows attackers to make it functionally unavailable (a denial of service for analysis) by renaming an executable file to a new extensionless 255-character name and launching it with NtCreateUserProcess. This can occur through an issue in wcscat_s error handling.

Severity

CVSS 3.1

4.2 medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
EPSS
0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE
CWE-120
Published
Modified
Record from
the NVD, synced

References

Check your stackJSON