CVE-2023-35344
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to take control of the system.
Risk Assessment
Organizations may be exposed to remote attacks that could lead to data loss or system takeover. Exploitation of this vulnerability can have serious security implications.
Recommendation
It is recommended to update the DNS server to the latest version to mitigate this vulnerability. Additionally, systems should be monitored for suspicious activity.
Other vulnerabilities in Windows DNS Server
See all- CVE-2021-27063High
Denial of service vulnerability in Windows DNS Server. An attacker could exploit this vulnerability to cause the DNS service to become unavailable.
- CVE-2021-26897Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit it to execute code on the DNS server.
- CVE-2021-26896High
Denial of service vulnerability in Windows DNS Server. An attacker could exploit this vulnerability to cause the DNS service to become unavailable.
- CVE-2021-26895Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit it to execute code on the DNS server.
- CVE-2021-26894Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit this flaw to execute arbitrary code in the context of the service.
- CVE-2021-26893Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit this flaw to execute arbitrary code in the context of the service.
- CVE-2021-26877Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit it to execute code on the DNS server.
- CVE-2020-1350CriticalActively exploited
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.
- CVE-2026-77505High
A use-after-free vulnerability in DNS Server allows an unauthorized attacker to execute code remotely over the network.
- CVE-2023-35346Medium
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
Original NVD description (English source)
Windows DNS Server Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS