CVE-2023-28297: Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
Published Apr 11, 2023
·Updated
Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
Affected Software
41 affected componentsFixes available
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Windows Server 2012
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows 11=22H2
Microsoft Windows 11=22H2
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows 10 1607<10.0.14393.5648
Microsoft Windows 10 1809<10.0.17763.3887
Microsoft Windows 10 20h2<10.0.19042.2486
Microsoft Windows 10 21h2<10.0.19044.2486
Microsoft Windows 10 22h2<10.0.19045.2486
Microsoft Windows 11 22h2<10.0.22621.1105
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10=20H2
Microsoft Windows 10=20H2
Microsoft Windows 10=20H2
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=1607
Microsoft Windows 10=1607
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10
Microsoft Windows 10
Remediation
Event History
Apr 11, 2023
CVE Published
07:00 AM
Data Sourced
07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·07:13 PM
Data Sourced
via MITRE·07:13 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-28297?
CVE-2023-28297 refers to the Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability.
2
Which software is affected by CVE-2023-28297?
CVE-2023-28297 affects various versions of Microsoft Windows Server, Windows 10, and Windows 11.
3
What is the severity of CVE-2023-28297?
CVE-2023-28297 has a severity rating of 8.8 (high).
4
How can I fix CVE-2023-28297 on Windows Server 2012 R2?
To fix CVE-2023-28297 on Windows Server 2012 R2, you can apply the security patches provided by Microsoft. The patch details can be found in the Microsoft support article linked in the remedy section.
5
Where can I find more information about CVE-2023-28297?
You can find more information about CVE-2023-28297 on the Microsoft Security Response Center (MSRC) website. The link to the MSRC website is provided in the reference section.