CVE-2023-35323

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Windows OLE Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.1850
MicrosoftWindows 11 version 21H2>= 10.0.0, < 10.0.22000.2176

References

Timeline

Published
Jul 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-353245.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-353257.5Windows Print Spooler Information Disclosure VulnerabilityCVE-2023-353265.5Windows CDP User Components Information Disclosure VulnerabilityCVE-2023-353287.8Windows Transaction Manager Elevation of Privilege VulnerabilityCVE-2023-353296.5Windows Authentication Denial of Service VulnerabilityCVE-2023-35339.8Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticaCVE-2023-353307.5Windows Extended Negotiation Denial of Service VulnerabilityCVE-2023-353316.5Windows Local Security Authority (LSA) Denial of Service VulnerabilityCVE-2023-353326.8Windows Remote Desktop Protocol Security Feature BypassCVE-2023-353337.5MediaWiki PandocUpload Extension Remote Code Execution VulnerabilityCVE-2023-353358.2Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-353365.4Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2023-35323: High severity, CVSS 7.8 | Vulnix