Security Resilience

CVE-2023-35331

Microsoft Windows Server 2012 r2

Published
11 July 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 6.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0072 53th percentile
Risk Priority 51 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-35331 is a medium-severity an unspecified weakness vulnerability in Microsoft Windows Server 2012. Its CVSS base score is 6.5 (Medium).

Operationally, ranked in the top 47% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Windows Local Security Authority (LSA) Denial of Service Vulnerability

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-35317Same product: Microsoft Windows Server 2012
CVE-2023-23400Same product: Microsoft Windows Server 2012
CVE-2023-35643Same product: Microsoft Windows Server 2012
CVE-2023-32022Same product: Microsoft Windows Server 2012
CVE-2023-35638Same product: Microsoft Windows Server 2012
CVE-2023-29369Same product: Microsoft Windows Server 2012
CVE-2023-32021Same product: Microsoft Windows Server 2012
CVE-2024-43512Same product: Microsoft Windows Server 2012
CVE-2024-37979Same product: Microsoft Windows Server 2012
CVE-2023-35352Same product: Microsoft Windows Server 2012

Affected Assets

microsoft
windows server 2012
all versions, r2
microsoft
windows server 2016
all versions
microsoft
windows server 2019
all versions
microsoft
windows server 2022
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References