Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-35313

Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

Description

Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows 10 Version 1809

  • 10.0.17763.0 to < 10.0.17763.4645affected

Microsoft Windows 10 Version 1809

  • 10.0.0 to < 10.0.17763.4645affected

Microsoft Windows Server 2019

  • 10.0.17763.0 to < 10.0.17763.4645affected

Microsoft Windows Server 2019 (Server Core installation)

  • 10.0.17763.0 to < 10.0.17763.4645affected

Microsoft Windows Server 2022

  • 10.0.20348.0 to < 10.0.20348.1850affected

Microsoft Windows 11 version 21H2

  • 10.0.0 to < 10.0.22000.2176affected

Microsoft Windows 10 Version 21H2

  • 10.0.19043.0 to < 10.0.19044.3208affected

Microsoft Windows 11 version 22H2

  • 10.0.22621.0 to < 10.0.22621.1992affected

Microsoft Windows 10 Version 22H2

  • 10.0.19045.0 to < 10.0.19045.3208affected

Microsoft Windows 10 Version 1507

  • 10.0.10240.0 to < 10.0.10240.20048affected

Microsoft Windows 10 Version 1607

  • 10.0.14393.0 to < 10.0.14393.6085affected

Microsoft Windows Server 2016

  • 10.0.14393.0 to < 10.0.14393.6085affected

Microsoft Windows Server 2016 (Server Core installation)

  • 10.0.14393.0 to < 10.0.14393.6085affected

References