CVE-2023-23400

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Windows DNS Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

VendorProductVersions
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.4131
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.4131
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.1607
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.5786
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.5786
MicrosoftWindows Server 2012 R2>= 6.3.9600.0, < 6.3.9600.20865
MicrosoftWindows Server 2012 R2 (Server Core installation)>= 6.3.9600.0, < 6.3.9600.20865

References

Timeline

Published
Mar 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-234017.8Windows Media Remote Code Execution VulnerabilityCVE-2023-234027.8Windows Media Remote Code Execution VulnerabilityCVE-2023-234038.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-234048.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2023-234058.1Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2023-234068.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-234077.1Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution VulnerabilityCVE-2023-234084.5Azure Apache Ambari Spoofing VulnerabilityCVE-2023-234095.5Client Server Run-Time Subsystem (CSRSS) Information Disclosure VulnerabilityCVE-2023-23416.1Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-234107.8Windows HTTP.sys Elevation of Privilege VulnerabilityCVE-2023-234116.5Windows Hyper-V Denial of Service Vulnerability
CVE-2023-23400: High severity, CVSS 7.2 | Vulnix