CVE-2023-23392

—

CVSS 3.1

9.8 critical

EPSS

2%p75

Published

Mar 14, 2023 (Mar 14, 2023)

Modified

Jun 17, 2026

Description

HTTP Protocol Stack Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows 11 21h2, windows 11 22h2, windows server 2022
Weakness: CWE-416
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news3 stories

Microsoft Patch Tuesday for March 2023 — Snort rules and prominent vulnerabilities

Cisco TalosMar 16, 16:47 UTC · Mar 16, 2023Vulnerability in the wildCVE-2023-24880 CVE-2023-23397 CVE-2023-21708+6 CVEs

60

Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2023Vulnerability in the wildCVE-2023-23397 CVE-2023-24880 CVE-2022-44698+10 CVEs

60

Microsoft patches zero-days used by state-sponsored and ransomware threat actors (CVE-2023-23397, CVE-2023-24880)

Help Net SecurityMar 14, 00:00 UTC · Mar 14, 2023Ransomware in the wildCVE-2023-23397 CVE-2023-24880 CVE-2022-44698+3 CVEs

60