CVE-2023-28231

—

CVSS 3.1

8.8 high

EPSS

37%p98

Published

Apr 11, 2023 (Apr 11, 2023)

Modified

Jun 17, 2026

Description

DHCP Server Service Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022
Weakness: CWE-122
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (36.9%)

In the news2 stories

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

Krebs on SecurityApr 12, 01:40 UTC · Apr 12, 2023Vulnerability in the wildCVE-2023-28206 CVE-2023-28205 CVE-2023-28252+4 CVEs

60

Microsoft Patch Tuesday for April 2023 — Snort rules and prominent vulnerabilities

Cisco TalosApr 11, 19:28 UTC · Apr 11, 2023Vulnerability in the wildCVE-2023-28252 CVE-2022-37969 CVE-2023-28219+7 CVEs

60