CVE-2023-32021

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Windows SMB Witness Service Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected software

VendorProductVersions
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.4499
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.4499
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.1787
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.5989
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.5989
MicrosoftWindows Server 2012 R2>= 6.3.9600.0, < 6.3.9600.21013
MicrosoftWindows Server 2012 R2 (Server Core installation)>= 6.3.9600.0, < 6.3.9600.21013

References

Timeline

Published
Jun 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-320227.6Windows Server Service Security Feature Bypass VulnerabilityCVE-2023-320243.0Microsoft Power Apps Spoofing VulnerabilityCVE-2023-320257.8Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityCVE-2023-320267.8Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityCVE-2023-320277.8Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityCVE-2023-320287.8Microsoft SQL OLE DB Remote Code Execution VulnerabilityCVE-2023-320297.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2023-32034.3The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_limit_pCVE-2023-320307.5.NET and Visual Studio Denial of Service VulnerabilityCVE-2023-320318.8Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-320326.5.NET and Visual Studio Elevation of Privilege VulnerabilityCVE-2023-320337.2Microsoft Failover Cluster Remote Code Execution Vulnerability
CVE-2023-32021: High severity, CVSS 7.1 | Vulnix