Cyber Resilience

CVE-2023-35331

Microsoft Windows Server 2012 r2

Published
11 July 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 6.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0072 51th percentile
Risk Priority 51 floored blend · peak EPSS

Summary

CVE-2023-35331 is a medium-severity an unspecified weakness vulnerability in Microsoft Windows Server 2012. Its CVSS base score is 6.5 (Medium).

Operationally, ranked in the top 49% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Windows Local Security Authority (LSA) Denial of Service Vulnerability

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-24941Same product: Microsoft Windows Server 2012
CVE-2023-29369Same product: Microsoft Windows Server 2012
CVE-2023-35643Same product: Microsoft Windows Server 2012
CVE-2023-35638Same product: Microsoft Windows Server 2012
CVE-2024-26197Same product: Microsoft Windows Server 2012
CVE-2023-36707Same product: Microsoft Windows Server 2012
CVE-2024-43512Same product: Microsoft Windows Server 2012
CVE-2023-36392Same product: Microsoft Windows Server 2012
CVE-2023-38162Same product: Microsoft Windows Server 2012
CVE-2023-32021Same product: Microsoft Windows Server 2012

Affected Assets

microsoft
windows server 2012
all versions, r2
microsoft
windows server 2016
all versions
microsoft
windows server 2019
all versions
microsoft
windows server 2022
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References