Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Windows DNS Spoofing Vulnerability

CVE-2023-35622 · published 2 years ago
Summary

Windows DNS Spoofing Vulnerability

What to do
  • Update microsoft windows_server_2022_23h2 to version 10.0.25398.584 or later.
Affected software
VendorProductAffected versions
microsoft windows_server_2012 r2
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
microsoft windows_server_2008 r2
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
microsoft windows_server_2016 All versions
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
microsoft windows_server_2019 All versions
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
microsoft windows_server_2022 All versions
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*
microsoft windows_server_2022_23h2 < 10.0.25398.584
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*
Original advisory text
Windows DNS Spoofing Vulnerability
Windows DNS Spoofing Vulnerability
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Type
CWE-290Authentication Bypass by Spoofing
Timeline
Published12 Dec 2023
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2023-35622 · NVD
Track software like this
Free during beta