CVE-2023-36046

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Windows Authentication Denial of Service Vulnerability

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-59

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-360477.8Windows Authentication Elevation of Privilege VulnerabilityCVE-2023-360499.8.NET, .NET Framework, and Visual Studio Elevation of Privilege VulnerabilityCVE-2023-36059.1A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an uCVE-2023-360508.0Microsoft Exchange Server Spoofing VulnerabilityCVE-2023-360528.6Azure CLI REST Command Information Disclosure VulnerabilityCVE-2023-360537.5In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regulaCVE-2023-360546.5lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenCVE-2023-36068.8A vulnerability was found in TamronOS up to 20230703. It has been classified as critical. This affects an unknown part of the file /api/pingCVE-2023-36078.0A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webcCVE-2023-360769.8SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and gain sensitive informCVE-2023-36088.8A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown processing of the componeCVE-2023-360815.4Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code
CVE-2023-36046: High severity, CVSS 7.1 | Vulnix