CVE-2023-35385: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Other sources
Microsoft Message Queuing Remote Code Execution Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.21503Patch KB5029304 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.22216Patch KB5029301 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.24414Patch KB5029308 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.26664Patch KB5029307 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.20107Patch KB5029259 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.3324Patch KB5029244 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.2134Patch KB5029263 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.6167Patch KB5029242 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.3324Patch KB5029244 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.2295Patch KB5029253 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.1906Fixed in 10.0.20348.1903Patch KB5029367 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.4737Patch KB5029247
Event History
Frequently Asked Questions
What is the severity of CVE-2023-35385?
CVE-2023-35385 has been rated as important due to the potential for remote code execution.
How do I fix CVE-2023-35385?
To fix CVE-2023-35385, apply the security updates provided by Microsoft for your affected products.
Which Microsoft products are affected by CVE-2023-35385?
CVE-2023-35385 affects various versions of Windows Server, Windows 10, and Windows 11.
Is there any workaround for CVE-2023-35385?
As of now, Microsoft does not provide any specific workarounds for CVE-2023-35385, so it's recommended to apply the updates.
What type of attack does CVE-2023-35385 protect against?
CVE-2023-35385 protects against remote code execution attacks that exploit the Microsoft Message Queuing vulnerability.