Data Loss Prevention
CVE-2023-0400: The protection bypass in Data Loss Prevention (DLP)
The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Data Loss Prevention (DLP) (Windows) 11.9.100 to 11.9.x | Upgrade past 11.9.x; see the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local user to bypass DLP controls when uploading sensitive data from a mapped drive into a web email client. Loading from a local driver was correctly prevented. Versions prior to 11.9 correctly detected and blocked the attempted upload of sensitive data.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.