Windows Secure Channel Denial of Service Vulnerability
33Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 32%
exploitation probability
32%top 2% of all CVEs
observed exploitation
nono source reports it
In short
A flaw in Windows Secure Channel (SChannel) allows an attacker to cause a denial of service by sending specially crafted network packets. This can crash or hang Windows services that rely on secure communications, making them unavailable to legitimate users.
Technical detail
Out-of-bounds read vulnerability (CWE-125) in Windows SChannel implementation triggered by malformed TLS/SSL handshake packets. An unauthenticated remote attacker can send specially crafted packets to cause memory access violations, leading to service crash or DoS. No user interaction required.
Summary generated and translated by AI from the official description.
Windows Secure Channel Denial of Service Vulnerability
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C