CVE-2023-35322
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk64th percentile - higher than 64% of all known CVEs
Summary
A vulnerability in Windows Deployment Services allows remote code execution by an attacker. Exploiting this flaw could lead to system takeover.
Risk Assessment
Organizations may be exposed to remote attacks that could result in data loss or unauthorized access to systems.
Recommendation
It is recommended to update systems to the latest versions and implement appropriate network security measures.
Other vulnerabilities in Windows Deployment Services
See all- CVE-2026-0386High
A vulnerability in Windows Deployment Services is due to improper access control. An unauthorized attacker can execute code over an adjacent network.
- CVE-2026-62893Critical
A use-after-free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-42987High
Use-After-Free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code remotely.
- CVE-2023-35321Medium
A vulnerability in Windows Deployment Services allows attackers to remotely trigger a fault, leading to denial of service. Exploiting this flaw may result in service unavailability for users.
Original NVD description (English source)
Windows Deployment Services Remote Code Execution Vulnerability