vulnerability
Microsoft Windows: CVE-2023-24941: Windows Network File System Remote Code Execution Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | May 9, 2023 | May 9, 2023 | Sep 18, 2025 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
May 9, 2023
Added
May 9, 2023
Modified
Sep 18, 2025
Description
Windows Network File System Remote Code Execution Vulnerability
Solutions
microsoft-windows-windows_server_2012-kb5026411microsoft-windows-windows_server_2012_r2-kb5026409microsoft-windows-windows_server_2016-1607-kb5026363microsoft-windows-windows_server_2019-1809-kb5026362microsoft-windows-windows_server_2022-21h2-kb5026370microsoft-windows-windows_server_2022-22h2-kb5026370msft-kb5026411-552a389c-4c6b-42f8-9784-efdd9e3e32cemsft-kb5026411-5e88d9ea-3c8d-493f-9134-d986ce552c34
References
- CVE-2023-24941
- https://attackerkb.com/topics/CVE-2023-24941
- CWE-908
- https://support.microsoft.com/help/5026362
- https://support.microsoft.com/help/5026363
- https://support.microsoft.com/help/5026370
- https://support.microsoft.com/help/5026409
- https://support.microsoft.com/help/5026411
- https://support.microsoft.com/help/5026415
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.