Skip to content
OpenAdvisories
Critical MSRC-CVE-2023-32014 1 CVE

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Published Jun 13, 2023 · Updated Jun 13, 2023

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
When Windows message queuing service is running in a PGM Server environment, an attacker could send a specially crafted file over the network to achieve remote code execution and attempt to trigger malicious code.

Security updates
10.0.17763.4499 — https://support.microsoft.com/help/5027222
10.0.20348.1787 — https://support.microsoft.com/help/5027225
10.0.20348.1784 — https://support.microsoft.com/help/5027319
10.0.22000.2057 — https://support.microsoft.com/help/5027223
10.0.19044.3086 — https://support.microsoft.com/help/5027215
10.0.22621.1848 — https://support.microsoft.com/help/5027231
10.0.10240.19983 — https://support.microsoft.com/help/5027230
10.0.14393.5989 — https://support.microsoft.com/help/5027219
6.0.6003.22113 — https://support.microsoft.com/help/5027279
6.0.6003.22113 — https://support.microsoft.com/help/5027277
6.1.7601.26564 — https://support.microsoft.com/help/5027275
6.1.7601.26564 — https://support.microsoft.com/help/5027256
6.2.9200.24314 — https://support.microsoft.com/help/5027283
6.2.9200.24314 — https://support.microsoft.com/help/5027281
6.3.9600.21013 — https://support.microsoft.com/help/5027271
6.3.9600.21013 — https://support.microsoft.com/help/5027282

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References