Windows Secure Channel Denial of Service Vulnerability
33Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 31%
exploitation probability
31%top 2% of all CVEs
observed exploitation
nono source reports it
In short
A flaw in Windows Secure Channel (the system that handles encrypted connections) allows an attacker to crash or hang the service by sending specially crafted network packets, disrupting secure communications.
Technical detail
This out-of-bounds read vulnerability in Windows Secure Channel allows remote, unauthenticated attackers to trigger a denial of service condition by sending malicious TLS/SSL packets that cause improper memory access. The vulnerability requires network connectivity to affected systems and results in service unavailability rather than data compromise.
Summary generated and translated by AI from the official description.
Windows Secure Channel Denial of Service Vulnerability
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 20H2Microsoft · Windows 10 Version 21H2Microsoft · Windows 10 Version 22H2Microsoft · Windows 11 version 21H2Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server 2022