First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-29352

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Windows Remote Desktop Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected software

Vendor	Product	Versions
Microsoft	Windows 10 Version 1809	>= 10.0.17763.0, < 10.0.17763.4499
Microsoft	Windows Server 2019	>= 10.0.17763.0, < 10.0.17763.4499
Microsoft	Windows Server 2019 (Server Core installation)	>= 10.0.17763.0, < 10.0.17763.4499
Microsoft	Remote Desktop client for Windows Desktop	>= 1.2.0.0, < 1.2.4337.0
Microsoft	Windows Server 2022	>= 10.0.20348.0, < 10.0.20348.1787
Microsoft	Windows 11 version 21H2	>= 10.0.0, < 10.0.22000.2057
Microsoft	Windows 10 Version 21H2	>= 10.0.19043.0, < 10.0.19044.3086
Microsoft	Windows 11 version 22H2	>= 10.0.22621.0, < 10.0.22621.1848
Microsoft	Windows 10 Version 22H2	>= 10.0.19045.0, < 10.0.19045.3086

References

Timeline

Published: Jun 14, 2023
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-293535.5Sysinternals Process Monitor for Windows Denial of Service Vulnerability CVE-2023-293544.7Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability CVE-2023-293555.3DHCP Server Service Information Disclosure Vulnerability CVE-2023-293567.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability CVE-2023-293579.8Microsoft SharePoint Server Elevation of Privilege Vulnerability CVE-2023-293587.8Windows GDI Elevation of Privilege Vulnerability CVE-2023-293597.8GDI Elevation of Privilege Vulnerability CVE-2023-29368.8Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted CVE-2023-293608.4Microsoft Streaming Service Elevation of Privilege Vulnerability CVE-2023-293617.0Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2023-293628.8Remote Desktop Client Remote Code Execution Vulnerability CVE-2023-293639.8Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2023-29352: Medium severity, CVSS 6.5 | Vulnix