CVE-2023-35331

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jul 11, 2023
Updated: Jul 14, 2023

Summary

CVE-2023-35331 is a Denial of Service (DoS) vulnerability affecting the Windows Local Security Authority (LSA). An attacker can exploit this vulnerability by sending specific requests to the LSA, causing it to crash and rendering the system unable to authenticate users or grant access to resources. The vulnerability could potentially impact all supported versions of Windows and may lead to significant downtime if exploited successfully. It is recommended that affected organizations apply the latest Microsoft security updates to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows Server 2012
  • Microsoft Windows Server 2016
  • Windows Server 2022
  • Microsoft Windows Server 2019
  • Microsoft Windows Server 2012 R2

Affected Vendors

  • Microsoft