CVE-2023-33173

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Remote Procedure Call Runtime Denial of Service Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126

Affected software

Vendor	Product	Versions
Microsoft	Windows 10 Version 1809	>= 10.0.17763.0, < 10.0.17763.4645
Microsoft	Windows 10 Version 1809	>= 10.0.0, < 10.0.17763.4645
Microsoft	Windows Server 2019	>= 10.0.17763.0, < 10.0.17763.4645
Microsoft	Windows Server 2019 (Server Core installation)	>= 10.0.17763.0, < 10.0.17763.4645
Microsoft	Windows Server 2022	>= 10.0.20348.0, < 10.0.20348.1850
Microsoft	Windows 11 version 21H2	>= 10.0.0, < 10.0.22000.2176
Microsoft	Windows 10 Version 21H2	>= 10.0.19043.0, < 10.0.19044.3208
Microsoft	Windows 11 version 22H2	>= 10.0.22621.0, < 10.0.22621.1992
Microsoft	Windows 10 Version 22H2	>= 10.0.19045.0, < 10.0.19045.3208
Microsoft	Windows 10 Version 1507	>= 10.0.10240.0, < 10.0.10240.20048
Microsoft	Windows 10 Version 1607	>= 10.0.14393.0, < 10.0.14393.6085
Microsoft	Windows Server 2016	>= 10.0.14393.0, < 10.0.14393.6085
Microsoft	Windows Server 2016 (Server Core installation)	>= 10.0.14393.0, < 10.0.14393.6085
Microsoft	Windows Server 2008 Service Pack 2	>= 6.0.6003.0, < 6.0.6003.22175
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	>= 6.0.6003.0, < 6.0.6003.22175
Microsoft	Windows Server 2008 Service Pack 2	>= 6.0.6003.0, < 6.0.6003.22175
Microsoft	Windows Server 2008 R2 Service Pack 1	>= 6.1.7601.0, < 6.1.7601.26623
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	>= 6.1.7601.0, < 6.1.7601.26623
Microsoft	Windows Server 2012	>= 6.2.9200.0, < 6.2.9200.24374
Microsoft	Windows Server 2012 (Server Core installation)	>= 6.2.9200.0, < 6.2.9200.24374
Microsoft	Windows Server 2012 R2	>= 6.3.9600.0, < 6.3.9600.21063
Microsoft	Windows Server 2012 R2 (Server Core installation)	>= 6.3.9600.0, < 6.3.9600.21063

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33173Patch, Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33173Patch, Vendor Advisory

Timeline

Published: Jul 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-331745.5Windows Cryptographic Information Disclosure Vulnerability CVE-2023-331757.5ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to st CVE-2023-331766.5BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a CVE-2023-331778.8Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be CVE-2023-331786.5Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `/dataset/data/{id}` API route inside the CM CVE-2023-331796.5Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.CVE-2023-33185.4A vulnerability was found in SourceCodester Resort Management System 1.0. It has been declared as problematic. Affected by this vulnerabilit CVE-2023-331806.5Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.CVE-2023-331815.3Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will print a stack trace wh CVE-2023-331824.3Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. The unsanitized SVG is convert CVE-2023-331834.3Calendar app for Nextcloud easily sync events from various devices with your Nextcloud. Some internal paths of the website are disclosed whe CVE-2023-331845.3Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It i