CVE-2023-21803

CriticalCVSS 9.8/10Last modified Aug 19, 2026

Description

Windows iSCSI Discovery Service Remote Code Execution Vulnerability

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1507>= 10.0.10240.0, < 10.0.10240.19747
MicrosoftWindows 10 Version 1607>= 10.0.14393.0, < 10.0.14393.5717
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.4010
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.2604
MicrosoftWindows 10 Version 21H2>= 10.0.19043.0, < 10.0.19044.2604
MicrosoftWindows 10 Version 22H2>= 10.0.19045.0, < 10.0.19045.2604
MicrosoftWindows Server 2008 Service Pack 2>= 6.0.6003.0, < 6.0.6003.21915
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)>= 6.0.6003.0, < 6.0.6003.21915

References

Timeline

Published
Feb 14, 2023
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-218047.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2023-218057.8Windows MSHTML Platform Remote Code Execution VulnerabilityCVE-2023-218068.2Power BI Report Server Spoofing VulnerabilityCVE-2023-218076.5Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-218087.8.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2023-218097.8Microsoft Defender for Endpoint Security Feature Bypass VulnerabilityCVE-2023-21816.5An issue has been discovered in GitLab affecting all versions before 15.9.8, 15.10.0 before 15.10.7, and 15.11.0 before 15.11.3. A maliciousCVE-2023-218117.5Windows iSCSI Service Denial of Service VulnerabilityCVE-2023-218127.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2023-218137.5Windows Secure Channel Denial of Service VulnerabilityCVE-2023-218157.8Visual Studio Remote Code Execution VulnerabilityCVE-2023-218167.5Windows Active Directory Domain Services API Denial of Service Vulnerability
CVE-2023-21803: Critical severity, CVSS 9.8 | Vulnix