CVE-2023-35321
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
A vulnerability in Windows Deployment Services allows attackers to remotely trigger a fault, leading to denial of service. Exploiting this flaw may result in service unavailability for users.
Risk Assessment
Organizations may experience service outages, leading to disruptions in operational activities. Attackers could exploit this vulnerability to destabilize the IT environment.
Recommendation
It is recommended to update systems to the latest versions that include security patches. Monitoring logs and implementing additional protective measures may also help mitigate the risk.
Other vulnerabilities in Windows Deployment Services
See all- CVE-2026-0386High
A vulnerability in Windows Deployment Services is due to improper access control. An unauthorized attacker can execute code over an adjacent network.
- CVE-2026-62893Critical
A use-after-free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-72957High
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
- CVE-2026-72954High
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
- CVE-2026-72943High
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
- CVE-2026-69607High
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-42987High
Use-After-Free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code remotely.
- CVE-2023-35322High
A vulnerability in Windows Deployment Services allows remote code execution by an attacker. Exploiting this flaw could lead to system takeover.
Original NVD description (English source)
Windows Deployment Services Denial of Service Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS