Description
Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
Reserved 2023-06-14 | Published 2023-07-11 | Updated 2024-08-02 | Assigner
microsoftHIGH: 7.2CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Problem types
CWE-122: Heap-based Buffer Overflow
Product status
10.0.0 before 10.0.17763.4645
affected
10.0.0 before 10.0.17763.4645
affected
10.0.0 before 10.0.20348.1850
affected
10.0.0 before 10.0.14393.6085
affected
10.0.0 before 10.0.14393.6085
affected
6.0.0 before 6.0.6003.22175
affected
6.0.0 before 6.0.6003.22175
affected
6.0.0 before 6.0.6003.22175
affected
6.1.0 before 6.1.7601.26623
affected
6.0.0 before 6.1.7601.26623
affected
6.2.0 before 6.2.9200.24374
affected
6.2.0 before 6.2.9200.24374
affected
6.3.0 before 6.3.9600.21063
affected
6.3.0 before 6.3.9600.21075
affected
6.3.0 before 6.3.9600.21063
affected
6.3.0 before 6.3.9600.21075
affected
References
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35350 (Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability) vendor-advisory
cve.org (CVE-2023-35350)
nvd.nist.gov (CVE-2023-35350)
Download JSON
Subscribe to our newsletter to learn more about our work.