What is the severity of CVE-2023-28250?

CVE-2023-28250 is categorized as a critical remote code execution vulnerability affecting multiple versions of Microsoft Windows.

How do I fix CVE-2023-28250?

To fix CVE-2023-28250, apply the latest security patches provided by Microsoft for your affected Windows version.

What platforms are affected by CVE-2023-28250?

CVE-2023-28250 affects various Microsoft Windows products, including Windows 10 and Windows Server 2022.

Can CVE-2023-28250 be exploited remotely?

Yes, CVE-2023-28250 can be exploited remotely if an attacker sends specially crafted packets to the affected system.

What are the potential impacts of CVE-2023-28250?

The potential impacts of CVE-2023-28250 include unauthorized execution of code and full system compromise.

Vulnerability/
CVE-2023-28250

critical

9.8

CWE

191

11/4/2023

23/1/2025

CVE-2023-28250: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

First published: Tue Apr 11 2023(Updated: )

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Credit: secure@microsoft.com secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Windows 10	=20H2	fix available externally
Microsoft Windows 10	=1809	fix available externally
Microsoft Windows 10	=22H2	fix available externally
Microsoft Windows 10	=21H2	fix available externally
Microsoft Windows 10		fix available externally
Microsoft Windows 10	=21H2	fix available externally
Microsoft Windows 10	=20H2	fix available externally
Microsoft Windows 10	=1607	fix available externally
Microsoft Windows 10	=1809	fix available externally
Microsoft Windows 10	=1607	fix available externally
Microsoft Windows 10	=20H2	fix available externally
Microsoft Windows Server 2012 R2		fix available externally fix available externally
Microsoft Windows 10	=1809	fix available externally
Microsoft Windows Server 2012 R2		fix available externally fix available externally
Microsoft Windows Server 2008 R2		fix available externally fix available externally
Microsoft Windows 10	=22H2	fix available externally
Microsoft Windows 10		fix available externally
Microsoft Windows 10	=21H2	fix available externally
Microsoft Windows 10	=22H2	fix available externally
Microsoft Windows Server 2008 R2		fix available externally fix available externally
Microsoft Windows Server		fix available externally fix available externally
Microsoft Windows Server		fix available externally fix available externally
Microsoft Windows Server		fix available externally fix available externally
Microsoft Windows Server		fix available externally fix available externally
Microsoft Windows Server		fix available externally fix available externally
Microsoft Windows Server		fix available externally fix available externally
Microsoft Windows Server 2016		fix available externally
Microsoft Windows Server 2016		fix available externally
Microsoft Windows Server 2019		fix available externally
Microsoft Windows Server 2019		fix available externally
Windows 11	=22H2	fix available externally
Windows 11	=22H2	fix available externally
Windows 11	=21H2	fix available externally
Windows 11	=21H2	fix available externally
Microsoft Windows Server 2022		fix available externally
Microsoft Windows Server 2022		fix available externally
Microsoft Windows 10	<10.0.10240.19869
Microsoft Windows 10	<10.0.14393.5850
Microsoft Windows 10	<10.0.17763.4252
Microsoft Windows 10	<10.0.19042.2846
Microsoft Windows 10	<10.0.19044.2846
Microsoft Windows 10	<10.0.19045.2846
Windows 11	<10.0.22000.1817
Windows 11	<10.0.22621.1555
Microsoft Windows Server	=sp2
Microsoft Windows Server	=r2-sp1
Microsoft Windows Server
Microsoft Windows Server	=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022

Remedy

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28250

Never miss a vulnerability like this again

Reference Links

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28250 (Advisory)

Frequently Asked Questions

What is the severity of CVE-2023-28250?
CVE-2023-28250 is categorized as a critical remote code execution vulnerability affecting multiple versions of Microsoft Windows.
How do I fix CVE-2023-28250?
To fix CVE-2023-28250, apply the latest security patches provided by Microsoft for your affected Windows version.
What platforms are affected by CVE-2023-28250?
CVE-2023-28250 affects various Microsoft Windows products, including Windows 10 and Windows Server 2022.
Can CVE-2023-28250 be exploited remotely?
Yes, CVE-2023-28250 can be exploited remotely if an attacker sends specially crafted packets to the affected system.
What are the potential impacts of CVE-2023-28250?
The potential impacts of CVE-2023-28250 include unauthorized execution of code and full system compromise.

collector/msrc
collector/msrc-cve
agent/first-publish-date
agent/type
agent/remedy
agent/title
agent/references
agent/severity
agent/description
source/Microsoft
agent/software-canonical-lookup
agent/event
agent/author
agent/weakness
agent/source
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/software-canonical-lookup-request
agent/softwarecombine
agent/tags
collector/nvd-api
source/NVD
collector/nvd-index
vendor/microsoft
canonical/microsoft windows 10
version/microsoft windows 10/20h2
version/microsoft windows 10/1809
version/microsoft windows 10/22h2
version/microsoft windows 10/21h2
version/microsoft windows 10/1607
canonical/microsoft windows server 2012 r2
canonical/microsoft windows server 2008 r2
canonical/microsoft windows server
canonical/microsoft windows server 2016
canonical/microsoft windows server 2019
canonical/windows 11
version/windows 11/22h2
version/windows 11/21h2
canonical/microsoft windows server 2022
version/microsoft windows server/sp2
version/microsoft windows server/r2-sp1
version/microsoft windows server/r2