CVE-2023-35348

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Active Directory Federation Service Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-522

Affected software

VendorProductVersions
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.4645
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.4645
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.1850
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.6085
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.6085

References

Timeline

Published
Jul 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-353499.8Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2023-35356.1A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an CVE-2023-353507.2Windows Active Directory Certificate Services (AD CS) Remote Code Execution VulnerabilityCVE-2023-353516.6Windows Active Directory Certificate Services (AD CS) Remote Code Execution VulnerabilityCVE-2023-353527.5Windows Remote Desktop Security Feature Bypass VulnerabilityCVE-2023-353537.8Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityCVE-2023-353557.8Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2023-353567.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-353577.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-353587.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-353597.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-35366.1A vulnerability was found in SimplePHPscripts Funeral Script PHP 3.1. It has been rated as problematic. Affected by this issue is some unkno
CVE-2023-35348: Medium severity, CVSS 6.5 | Vulnix