CVE-2023-38151

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-908

Affected software

VendorProductVersions
MicrosoftHost Integration Server 2020>= 7.0, < KB5032921
MicrosoftHost Integration Server 2020>= 1.0.0, < KB5032921

References

Timeline

Published
Nov 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-381525.3DHCP Server Service Information Disclosure VulnerabilityCVE-2023-381547.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-381558.1Azure DevOps Server Remote Code Execution VulnerabilityCVE-2023-381567.2Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege VulnerabilityCVE-2023-381576.5Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2023-381583.1Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2023-381597.0Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2023-381605.5Windows TCP/IP Information Disclosure VulnerabilityCVE-2023-381617.8Windows GDI Elevation of Privilege VulnerabilityCVE-2023-381627.5DHCP Server Service Denial of Service VulnerabilityCVE-2023-381637.8Windows Defender Attack Surface Reduction Security Feature BypassCVE-2023-381645.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-38151: High severity, CVSS 8.8 | Vulnix