CVE-2023-36434: Windows IIS Server Elevation of Privilege Vulnerability
Published Oct 10, 2023
·Updated
Windows IIS Server Elevation of Privilege Vulnerability
Affected Software
49 affected componentsFixes available
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2016
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows 11=22H2
Microsoft Windows 11=22H2
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows 10 1507<10.0.10240.20232
Microsoft Windows 10 1607 X64<10.0.14393.6351
Microsoft Windows 10 1607 X86<10.0.14393.6351
Microsoft Windows 10 1809<10.0.17763.4974
Microsoft Windows 10 1809<10.0.17763.4974
Microsoft Windows 10 21h2<10.0.19041.3570
Microsoft Windows 10 22h2<10.0.19041.3570
Microsoft Windows 11 21h2<10.0.22000.2538
Microsoft Windows 11 22h2<10.0.22621.2428
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=1607
Microsoft Windows 10=1607
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10
Microsoft Windows 10
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008 R2
Remediation
Event History
Oct 10, 2023
CVE Published
07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:08 PM
Data Sourced
via MITRE·05:08 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-36434?
CVE-2023-36434 is a vulnerability in Windows IIS Server that allows elevation of privilege.
2
How severe is CVE-2023-36434?
CVE-2023-36434 has a severity rating of 9.8, which is considered critical.
3
Which software is affected by CVE-2023-36434?
Windows 10, Windows 11, Windows Server 2008, Windows Server 2012, Windows Server 2016, Windows Server 2019, and Windows Server 2022 are affected by CVE-2023-36434.
4
How do I fix CVE-2023-36434?
To fix CVE-2023-36434, apply the appropriate patch provided by Microsoft based on the affected software version.
5
Where can I find more information about CVE-2023-36434?
You can find more information about CVE-2023-36434 on the Microsoft Security Response Center website.