CVE-2023-35365

CVE-2023-35365 is a critical vulnerability identified in the Windows Routing and Remote Access Service (RRAS). This flaw in software design or implementation allows for remote code execution (RCE), which can lead to unauthorized access, data theft, or even control over an affected system. The vulnerability has been given a severity rating of 9.8 out of 10 on the Common Vulnerability Scoring System (CVSS), indicating its high risk and potential impact. This vulnerability was discovered alongside two others, CVE-2023-35366 and CVE-2023-35367, all of which affect the Windows RRAS. Security researchers have highlighted these three vulnerabilities as meriting priority attention due to their severe implications. All three of these vulnerabilities allow for RCE, making them particularly dangerous and urgent to address. Microsoft has acknowledged the existence of CVE-2023-35365 and its associated vulnerabilities. It is recommended that users promptly apply patches provided by Microsoft to mitigate the risks posed by these vulnerabilities. Failing to do so could leave systems exposed to potential exploitation, with consequences ranging from unauthorized system access to potential data breaches.