NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2023-23392

CVSS 3.1: 9.8 critical
EPSS: 2%p75
Published: Mar 14, 2023 · Mar 14, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-23392 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

HTTP Protocol Stack Remote Code Execution Vulnerability

Vendors: microsoft

Products: windows 11 21h2, windows 11 22h2, windows server 2022

Weakness: CWE-416

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news

3 stories

Microsoft Patch Tuesday for March 2023 — Snort rules and prominent vulnerabilities

Cisco TalosMar 16, 16:47 UTC · Mar 16, 2023VulnerabilityExploitedCVE-2023-24880 CVE-2023-23397 CVE-2023-21708+62

60

Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2023VulnerabilityExploitedCVE-2023-23397 CVE-2023-24880 CVE-2022-44698+103 · 1 read

60

Microsoft patches zero-days used by state-sponsored and ransomware threat actors (CVE-2023-23397, CVE-2023-24880)

Help Net SecurityMar 14, 00:00 UTC · Mar 14, 2023RansomwareExploitedCVE-2023-23397 CVE-2023-24880 CVE-2022-44698+32 · 1 read

60