CVE-2023-38151 HIGH

CVE-2023-38151: Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability

Vendor Microsoft
Product Host Integration Server 2020
Weakness CWE-908
Published November 14, 2023
Last update October 8, 2025
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

What the vulnerability does

01Description

Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability

Key dates

02Disclosure timeline

November 14, 2023 CVE published
October 8, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-29829 Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability CVE-2025-62472 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability CVE-2026-34543 OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl) CVE-2025-21312 Windows Smart Card Reader Information Disclosure Vulnerability CVE-2025-33052 Windows DWM Core Library Information Disclosure Vulnerability