CVE-2023-36911CWE-190

CVE-2023-36911

Critical · published August 8, 2023

CVSS v3.1
9.8
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

🚨 A single crafted message can take full control of your system! This critical vulnerability in Microsoft Message Queuing (MSMQ) is a remote code execution time bomb just waiting to tick. 🔥 Think of it like a delivery service that opens all boxes without checking the contents — one malicious package could unleash chaos inside your network! An attacker could exploit this vulnerability to execute arbitrary code on the affected system. This could mean total control, allowing them to manipulate data, install malware, or even hijack sensitive information without ever being detected. Absolutely devastating!

Put simply

Think of it like a delivery service that opens all boxes without checking the contents — one malicious package could unleash chaos inside your network! This vulnerability arises when MSMQ improperly handles messages, allowing attackers to send specially crafted messages that execute arbitrary code. If exploited, this could lead to complete system takeover without requiring user interaction.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on the affected system. This could mean total control, allowing them to manipulate data, install malware, or even hijack sensitive information without ever being detected. Absolutely devastating! Immediately apply the latest patches from Microsoft to secure your system. Ensure you have the most recent updates installed, and consider auditing your messaging configuration to prevent unauthorized access. Don't delay — your security is at stake! You've got this! With these steps, you'll be on your way to patching up your defenses in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01705 · 77.1th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2023-08-08T22:15Z
Affected products (16)
ProductVersionsFixed in
microsoft/windows_10< 10.0.10240.2010710.0.10240.20107
microsoft/windows_10_1607< 10.0.14393.616710.0.14393.6167
microsoft/windows_10_1809< 10.0.17763.473710.0.17763.4737
microsoft/windows_10_21h2< 10.0.19044.332410.0.19044.3324
microsoft/windows_10_22h2< 10.0.19045.332410.0.19045.3324
microsoft/windows_11_21h2< 10.0.22000.229510.0.22000.2295
microsoft/windows_11_21h2< 10.0.22000.229510.0.22000.2295
microsoft/windows_11_22h2< 10.0.22621.213410.0.22621.2134
microsoft/windows_11_22h2< 10.0.22621.213410.0.22621.2134
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2016all versions—
microsoft/windows_server_2019all versions—
microsoft/windows_server_2022all versions—
References (2)
EPSS history
Timeline
  • 08 AUG 17:08Z
    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
    cvelistv5