CVE-2023-35350

HighCVSS 7.2

Published: 11/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.07%

60th percentile - higher than 60% of all known CVEs

Summary

A vulnerability in Windows Active Directory Certificate Services (AD CS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

Risk Assessment

Exploitation of this vulnerability could lead to serious security breaches, including data and resource takeover. It may also result in loss of trust from customers and partners.

Recommendation

It is recommended to update Windows to the latest version to patch this vulnerability. Additionally, systems should be monitored for unauthorized activities.

Other vulnerabilities in Windows Active Directory Certificate Services (AD CS)

CVE-2023-35351Medium
A vulnerability in Windows Active Directory Certificate Services (AD CS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

Original NVD description (English source)

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS