Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2023-40399 | Windows IIS Server Elevation of Privilege Vulnerability |
Tue, 10 Dec 2024 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20232:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.6351:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.6351:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.4974:*:*:*:*:*:arm64:* cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.4974:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.4974:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_10_21H2:10.0.19041.3570:*:*:*:*:*:arm64:* cpe:2.3:o:microsoft:windows_10_21H2:10.0.19041.3570:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_10_21H2:10.0.19041.3570:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.3570:*:*:*:*:*:arm64:* cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.3570:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.3570:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.2538:*:*:*:*:*:arm64:* cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.2538:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.2428:*:*:*:*:*:arm64:* cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.2428:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.26769:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22317:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22317:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.24523:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.21620:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6351:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.4974:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.2031:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft windows 10 21h2
Microsoft windows 10 22h2 Microsoft windows 11 21h2 Microsoft windows 11 22h2 Microsoft windows Server 2008 R2 Microsoft windows Server 2008 Sp2 Microsoft windows Server 2012 R2 |
Subscriptions
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2025-04-14T22:46:36.022Z
Reserved: 2023-06-21T15:14:27.788Z
Link: CVE-2023-36434
No data.
Status : Modified
Published: 2023-10-10T18:15:12.617
Modified: 2026-06-17T06:06:16.913
Link: CVE-2023-36434
No data.
OpenCVE Enrichment
No data.
-
CWE-307
Improper Restriction of Excessive Authentication Attempts
- NVD-CWE-noinfo
EUVD