CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2023-36397

CVSS 9.8v3.1pub. 2023-11-14upd. 2024-11-21

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Microsoft Windows 10 1507
OS
Microsoft
< 10.0.10240.20308
Microsoft Windows 10 1607
OS
Microsoft
< 10.0.14393.6452
Microsoft Windows 10 1809
OS
Microsoft
< 10.0.17763.5122
Microsoft Windows 10 21h2
OS
Microsoft
< 10.0.19041.3693
Microsoft Windows 10 22h2
OS
Microsoft
< 10.0.19045.3693
Microsoft Windows 11 21h2
OS
Microsoft
< 10.0.22000.2600
Microsoft Windows 11 22h2
OS
Microsoft
< 10.0.22621.2715
Microsoft Windows 11 23h2
OS
Microsoft
< 10.0.22621.2715
Microsoft Windows Server 2008
OS
Microsoft
r2sp2
Microsoft Windows Server 2012
OS
Microsoft
r2
Microsoft Windows Server 2016
OS
Microsoft
wszystkie wersje
Microsoft Windows Server 2019
OS
Microsoft
wszystkie wersje
Microsoft Windows Server 2022
OS
Microsoft
wszystkie wersje

🟢

PATCH AVAILABLE

Vendor update available. Deploy in standard maintenance cycle.

Tags

RCE

CWE

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2023-…

msrc.microsoft.com/update-guide/vulnerability/CVE-2023-…

Related vulnerabilities

CVE-2025-59287CRITICAL9.8⚠ KEVPL ✓ten sam produkt

RCE w Windows Server Update Service (WSUS) — deserializacja danych

CVE-2020-1350CRITICAL10.0⚠ KEVten sam produkt

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly ...

CVE-2020-1040CRITICAL9.0⚠ KEVten sam produkt

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly val...

CVE-2020-0646CRITICAL9.8⚠ KEVten sam produkt

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properl...

CVE-2019-0708CRITICAL9.8⚠ KEVten sam produkt

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services wh...