CVE-2023-24941

—

CVSS 3.1

9.8 critical

EPSS

95%p100

Published

May 9, 2023 (May 9, 2023)

Modified

Jun 17, 2026

Description

Windows Network File System Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows server 2012, windows server 2016, windows server 2019, windows server 2022
Weakness: CWE-908
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (94.7%)

In the news4 stories

Microsoft Patch Tuesday, May 2023 Edition

Krebs on SecurityMay 10, 07:06 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2023-24941+2 CVEs

60

Microsoft Patch Tuesday for May 2023 fixed 2 zero

Security AffairsMay 10, 05:25 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2023-24941+2 CVEs

60

Microsoft Patch Tuesday for May 2023 — Fewest vulnerabilities disclosed in a month in three

Cisco TalosMay 9, 17:47 UTC · May 9, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24941 CVE-2023-29325+7 CVEs

60

Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)

Help Net SecurityMay 9, 00:00 UTC · May 9, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2022-21882+10 CVEs1

60