CVE-2023-35330 | THREATINT

Home

Description

Windows Extended Negotiation Denial of Service Vulnerability

PUBLISHED Reserved 2023-06-14 | Published 2023-07-11 | Updated 2025-01-01 | Assigner microsoft

HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Problem types

CWE-126: Buffer Over-read

Product status

10.0.17763.0 (custom) before 10.0.17763.4645

affected

10.0.0 (custom) before 10.0.17763.4645

affected

10.0.17763.0 (custom) before 10.0.17763.4645

affected

10.0.17763.0 (custom) before 10.0.17763.4645

affected

10.0.20348.0 (custom) before 10.0.20348.1850

affected

10.0.0 (custom) before 10.0.22000.2176

affected

10.0.19043.0 (custom) before 10.0.19044.3208

affected

10.0.22621.0 (custom) before 10.0.22621.1992

affected

10.0.19045.0 (custom) before 10.0.19045.3208

affected

10.0.10240.0 (custom) before 10.0.10240.20048

affected

10.0.14393.0 (custom) before 10.0.14393.6085

affected

10.0.14393.0 (custom) before 10.0.14393.6085

affected

10.0.14393.0 (custom) before 10.0.14393.6085

affected

6.1.7601.0 (custom) before 6.1.7601.26623

affected

6.1.7601.0 (custom) before 6.1.7601.26623

affected

6.2.9200.0 (custom) before 6.2.9200.24374

affected

6.2.9200.0 (custom) before 6.2.9200.24374

affected

6.3.9600.0 (custom) before 6.3.9600.21063

affected

6.3.9600.0 (custom) before 6.3.9600.21063

affected

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35330 (Windows Extended Negotiation Denial of Service Vulnerability) vendor-advisory

cve.org (CVE-2023-35330)

nvd.nist.gov (CVE-2023-35330)

Download JSON