CVE-2023-35323
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
A vulnerability in Windows OLE allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
Risk Assessment
Exploitation of this vulnerability could lead to serious security breaches, including data theft and remote access to organizational systems.
Recommendation
It is recommended to update Windows to the latest version and implement appropriate security measures to minimize the risk of an attack.
Other vulnerabilities in Windows OLE
See all- CVE-2026-50686High
Windows OLE has a type confusion vulnerability that allows an unauthorized attacker to execute code remotely.
- CVE-2026-50344High
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.
- CVE-2024-30077High
A remote code execution vulnerability in the Windows OLE component allows an attacker to execute arbitrary code in the context of the logged-on user. Exploitation requires user interaction, such as opening a specially crafted file.
- CVE-2024-21372High
Remote code execution vulnerability in Windows OLE. An attacker could exploit it to execute code on the target system.
Original NVD description (English source)
Windows OLE Remote Code Execution Vulnerability