CVE-2023-36585CWE-20

Windows upnphost.dll Denial of Service Vulnerability

High · published October 10, 2023

CVSS v3.1

7.5

EPSS

3%

Percentile

85.2

In the wild

Unconfirmed

What it is

Windows upnphost.dll Denial of Service Vulnerability

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
CVSS v4.0: Not supplied
EPSS: 0.02604 · 85.2th percentile
Weakness: CWE-20 · Improper Input Validation
Published: 2023-10-10T17:07Z

EPSS history

Timeline

10 OCT 17:07Z
Windows upnphost.dll Denial of Service Vulnerability
cvelistv5