What is the severity of CVE-2023-36909?

CVE-2023-36909 is classified as a Denial of Service vulnerability affecting Microsoft Message Queuing.

How do I fix CVE-2023-36909?

To fix CVE-2023-36909, apply the latest security updates provided by Microsoft for affected products.

Which products are affected by CVE-2023-36909?

CVE-2023-36909 affects various versions of Microsoft Windows including Windows 10, Windows Server 2012 R2, Windows Server 2019, and Windows Server 2022.

Can CVE-2023-36909 be exploited remotely?

Yes, CVE-2023-36909 can be exploited remotely, potentially leading to denial of service conditions.

When was CVE-2023-36909 disclosed?

CVE-2023-36909 was disclosed in the Microsoft security update guide related to recent vulnerabilities.

Vulnerability/
CVE-2023-36909

medium

6.5

CWE

191

8/8/2023

27/2/2025

CVE-2023-36909: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

First published: Tue Aug 08 2023(Updated: )

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Windows Server 2012 R2		fix available externally fix available externally
Microsoft Windows 10	=21H2	fix available externally
Microsoft Windows 10	=21H2	fix available externally
Microsoft Windows 10	=1607	fix available externally
Microsoft Windows Server 2008 R2		fix available externally fix available externally
Microsoft Windows 10	=22H2	fix available externally
Microsoft Windows 10	=1809	fix available externally
Microsoft Windows 10		fix available externally
Microsoft Windows 10	=21H2	fix available externally
Microsoft Windows Server 2012 R2		fix available externally fix available externally
Microsoft Windows Server 2008 R2		fix available externally fix available externally
Microsoft Windows 10	=1607	fix available externally
Microsoft Windows 10		fix available externally
Microsoft Windows 10	=1809	fix available externally
Microsoft Windows 10	=22H2	fix available externally
Microsoft Windows 10	=22H2	fix available externally
Microsoft Windows 10	=1809	fix available externally
Microsoft Windows Server		fix available externally fix available externally
Microsoft Windows Server		fix available externally fix available externally
Microsoft Windows Server		fix available externally fix available externally
Microsoft Windows Server		fix available externally fix available externally
Microsoft Windows Server		fix available externally fix available externally
Microsoft Windows Server		fix available externally fix available externally
Microsoft Windows Server 2016		fix available externally
Microsoft Windows Server 2016		fix available externally
Microsoft Windows Server 2019		fix available externally
Microsoft Windows Server 2019		fix available externally
Windows 11	=22H2	fix available externally
Windows 11	=22H2	fix available externally
Windows 11	=21H2	fix available externally
Windows 11	=21H2	fix available externally
Microsoft Windows Server 2022		fix available externally fix available externally
Microsoft Windows Server 2022		fix available externally fix available externally
Microsoft Windows 10	<10.0.10240.20107
Microsoft Windows 10	<10.0.14393.6167
Microsoft Windows 10	<10.0.17763.4737
Microsoft Windows 10	<10.0.19044.3324
Microsoft Windows 10	<10.0.19045.3324
Windows 11	<10.0.22000.2295
Windows 11	<10.0.22000.2295
Windows 11	<10.0.22621.2134
Windows 11	<10.0.22621.2134
Microsoft Windows Server	=sp2
Microsoft Windows Server	=r2-sp1
Microsoft Windows Server
Microsoft Windows Server	=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022

Remedy

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36909

Never miss a vulnerability like this again

Reference Links

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36909 (Advisory)

Frequently Asked Questions

What is the severity of CVE-2023-36909?
CVE-2023-36909 is classified as a Denial of Service vulnerability affecting Microsoft Message Queuing.
How do I fix CVE-2023-36909?
To fix CVE-2023-36909, apply the latest security updates provided by Microsoft for affected products.
Which products are affected by CVE-2023-36909?
CVE-2023-36909 affects various versions of Microsoft Windows including Windows 10, Windows Server 2012 R2, Windows Server 2019, and Windows Server 2022.
Can CVE-2023-36909 be exploited remotely?
Yes, CVE-2023-36909 can be exploited remotely, potentially leading to denial of service conditions.
When was CVE-2023-36909 disclosed?
CVE-2023-36909 was disclosed in the Microsoft security update guide related to recent vulnerabilities.

collector/msrc
agent/type
agent/first-publish-date
collector/msrc-cve
source/Microsoft
agent/software-canonical-lookup
agent/severity
agent/remedy
agent/references
agent/event
agent/weakness
agent/title
agent/description
agent/source
agent/software-canonical-lookup-request
agent/author
agent/tags
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
collector/nvd-api
source/NVD
collector/nvd-index
vendor/microsoft
canonical/microsoft windows server 2012 r2
canonical/microsoft windows 10
version/microsoft windows 10/21h2
version/microsoft windows 10/1607
canonical/microsoft windows server 2008 r2
version/microsoft windows 10/22h2
version/microsoft windows 10/1809
canonical/microsoft windows server
canonical/microsoft windows server 2016
canonical/microsoft windows server 2019
canonical/windows 11
version/windows 11/22h2
version/windows 11/21h2
canonical/microsoft windows server 2022
version/microsoft windows server/sp2
version/microsoft windows server/r2-sp1
version/microsoft windows server/r2