CVE-2023-21727
Published: 11 April 2023
Summary
CVE-2023-21727 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 6.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2023-21727 is a remote code execution vulnerability in the Remote Procedure Call Runtime component of Windows. It carries a CVSS 3.1 score of 8.8 and is associated with CWE-122, indicating a heap-based buffer overflow that can be triggered remotely.
An authenticated attacker with network access and low privileges can exploit the flaw without user interaction to achieve arbitrary code execution with the privileges of the affected process, resulting in full compromise of confidentiality, integrity, and availability on the target system.
Microsoft’s security advisory for CVE-2023-21727 directs administrators to apply the updates released in the April 2023 Patch Tuesday cycle; the guidance emphasizes installing the vendor patches as the primary mitigation, with no workarounds listed.
The EPSS score has remained essentially flat near 0.11, indicating moderate but stable exploitation interest since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-25894
Vulnerability details
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.