CVE-2023-38151 - Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability · CoreCVE

Back Back to CVE browser

HIGH

Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability

Published Nov 14, 2023

8.8

HIGH

CVSS 3.1

EPSS 1.78%

Description

Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability

Affected products

Vendor Microsoft Product Host Integration Server 2020 Default
n/a
- Version
  1.0.0
  Status
  affected
  Constraints
  <KB5032921
- Version
  7.0
  Status
  affected
  Constraints
  <KB5032921

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Host Integration Server 2020

n/a

Version	Status	Constraints
1.0.0	affected	<KB5032921
7.0	affected	<KB5032921

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-908

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-41976
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38151
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-41976		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38151		vendor-advisoryPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Nov 14, 2023

Updated Oct 8, 2025

Reserved Jul 12, 2023

Link CVE-2023-38151

CISA Vulnrichment

Updated Feb 23, 2024

Status Modified

Modified Jun 17, 2026

Link CVE-2023-38151

Severity n/a

Public date n/a

Links CVE-2023-38151

Assigner microsoft

Published Nov 14, 2023

Updated Oct 8, 2025

Exploited since n/a

Link EUVD-2023-41976

EUVD-2023-41976