CVE-2023-35381
HighCVSS 8.8Exploitation Probability (EPSS)
High risk78th percentile - higher than 78% of all known CVEs
Summary
A vulnerability in the Windows Fax Service allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the system and potential data loss. Organizations should be aware of the risks associated with unpatched systems.
Recommendation
It is recommended to immediately install available patches and monitor systems for unauthorized activity.
Other vulnerabilities in Windows Fax Service
See all- CVE-2026-72944High
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69621High
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69509High
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
- CVE-2023-21694Medium
Remote code execution vulnerability in Windows Fax Service. An attacker could remotely execute arbitrary code on the vulnerable system.
Original NVD description (English source)
Windows Fax Service Remote Code Execution Vulnerability

