CVE-2023-35351

MediumCVSS 6.6

Published: 11/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.61%

44th percentile - higher than 44% of all known CVEs

Summary

A vulnerability in Windows Active Directory Certificate Services (AD CS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

Risk Assessment

This threat could lead to severe consequences, including data loss and system integrity breaches. Organizations should be aware of potential attacks leveraging this vulnerability.

Recommendation

It is recommended to immediately update systems to the latest version to minimize risks associated with this vulnerability. Additionally, monitoring logs and implementing extra security measures is advisable.

Original NVD description (English source)

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability