CVE-2023-21708

—

CVSS 3.1

9.8 critical

EPSS

1%p72

Published

Mar 14, 2023 (Mar 14, 2023)

Modified

Jun 17, 2026

Description

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows 10 1507, windows 10 1607, windows 10 1809, windows 10 20h2, windows 10 21h2, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows server 2008, windows server 2012, windows server 2016, windows server 2019
Weakness: CWE-191
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news3 stories

Microsoft Patch Tuesday for March 2023 — Snort rules and prominent vulnerabilities

Cisco TalosMar 16, 16:47 UTC · Mar 16, 2023Vulnerability in the wildCVE-2023-24880 CVE-2023-23397 CVE-2023-21708+6 CVEs

60

Microsoft Patches Two Zero Days This Month

Infosecurity MagazineMar 15, 09:30 UTC · Mar 15, 2023Vulnerability in the wildCVE-2023-23397 CVE-2023-24880 CVE-2023-21708

60

Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2023Vulnerability in the wildCVE-2023-23397 CVE-2023-24880 CVE-2022-44698+10 CVEs

60