CVE-2023-29363

Description

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
5.232

Associated Vulnerability

VulnerabilityOS Platform
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB5027219)Windows
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability for Windows Server 2016 for x64-based Systems (KB5027219)Windows
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB5027219)Windows
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1507 for x86-based Systems (KB5027230)Windows
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1507 for x64-based Systems (KB5027230)Windows
Windows CryptoAPI Denial of Service Vulnerability for Windows 10 Version 21H2 for x86-based Systems (KB5027215)Windows
Windows CryptoAPI Denial of Service Vulnerability for Windows 10 Version 21H2 for x64-based Systems (KB5027215)Windows
Windows CryptoAPI Denial of Service Vulnerability for Windows 10 Version 22H2 for x64-based Systems (KB5027215)Windows
Windows CryptoAPI Denial of Service Vulnerability for Windows 10 Version 22H2 for x86-based Systems (KB5027215)Windows
Windows CryptoAPI Denial of Service Vulnerability for Windows 10 Version 1809 for x86-based Systems (KB5027222)Windows
Windows CryptoAPI Denial of Service Vulnerability for Windows Server 2019 for x64-based Systems (KB5027222)Windows
Windows CryptoAPI Denial of Service Vulnerability for Windows 10 Version 1809 for x64-based Systems (KB5027222)Windows
Windows CryptoAPI Denial of Service Vulnerability for Windows 11 for x64-based Systems (KB5027223)Windows
Windows CryptoAPI Denial of Service Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5027225)Windows
Windows CryptoAPI Denial of Service Vulnerability for Windows 11 Version 22H2 for x64-based Systems (KB5027231)Windows
NTFS Elevation of Privilege Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB5027256)Windows
NTFS Elevation of Privilege Vulnerability for Windows Embedded Standard 7 for x86-based Systems (KB5027256)Windows
NTFS Elevation of Privilege Vulnerability for Windows Embedded Standard 7 for x64-based Systems (KB5027256)Windows
NTFS Elevation of Privilege Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB5027271)Windows
NTFS Elevation of Privilege Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB5027275)Windows
NTFS Elevation of Privilege Vulnerability for Windows Embedded Standard 7 for x86-based Systems (KB5027275)Windows
NTFS Elevation of Privilege Vulnerability for Windows Embedded Standard 7 for x64-based Systems (KB5027275)Windows
NTFS Elevation of Privilege Vulnerability for Windows Server 2008 for x64-based Systems (KB5027277)Windows
NTFS Elevation of Privilege Vulnerability for Windows Server 2008 for x86-based Systems (KB5027277)Windows
NTFS Elevation of Privilege Vulnerability for Windows Server 2008 for x64-based Systems (KB5027279)Windows
NTFS Elevation of Privilege Vulnerability for Windows Server 2008 for x86-based Systems (KB5027279)Windows
NTFS Elevation of Privilege Vulnerability for Windows Server 2012 for x64-based Systems (KB5027281)Windows
NTFS Elevation of Privilege Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB5027282)Windows
NTFS Elevation of Privilege Vulnerability for Windows Server 2012 for x64-based Systems (KB5027283)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-363542023-06 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5027219)
PATCH-363552023-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5027219)
PATCH-363562023-06 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5027219)
PATCH-363692023-06 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB5027230)
PATCH-363702023-06 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB5027230)
PATCH-363612023-06 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5027215)
PATCH-363622023-06 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5027215)
PATCH-363632023-06 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5027215)
PATCH-363642023-06 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5027215)
PATCH-363582023-06 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5027222)
PATCH-363592023-06 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5027222)
PATCH-363602023-06 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5027222)
PATCH-363672023-06 Cumulative Update for Windows 11 for x64-based Systems (KB5027223)
PATCH-363572023-06 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5027225)
PATCH-363662023-06 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5027231)
PATCH-364382023-06 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5027256) (ESU)
PATCH-364392023-06 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB5027256) (ESU)
PATCH-364402023-06 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB5027256) (ESU)
PATCH-363712023-06 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB5027271)
PATCH-364432023-06 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB5027275) (ESU)
PATCH-364442023-06 Security Monthly Quality Rollup for Windows Embedded Standard 7 for x86-based Systems (KB5027275) (ESU)
PATCH-364452023-06 Security Monthly Quality Rollup for Windows Embedded Standard 7 for x64-based Systems (KB5027275) (ESU)
PATCH-364412023-06 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5027277) (ESU)
PATCH-364422023-06 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB5027277) (ESU)
PATCH-364462023-06 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB5027279) (ESU)
PATCH-364472023-06 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems (KB5027279) (ESU)
PATCH-363532023-06 Security Only Quality Update for Windows Server 2012 for x64-based Systems (KB5027281)
PATCH-363522023-06 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems (KB5027282)
PATCH-363722023-06 Security Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB5027283)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234