CVE-2023-21712: Microsoft Windows 10

High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days.

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Affected products

• Microsoft Windows 10: before 10.0.10240.19562 (fixed in 10.0.10240.19562)
• Microsoft Windows 10 1607: before 10.0.14393.5501 (fixed in 10.0.14393.5501)
• Microsoft Windows 10 1809: before 10.0.17763.3650 (fixed in 10.0.17763.3650)
• Microsoft Windows 10 20h2: before 10.0.19042.2251 (fixed in 10.0.19042.2251)
• Microsoft Windows 10 21h1: before 10.0.19043.2251 (fixed in 10.0.19043.2251)
• Microsoft Windows 10 21h2: before 10.0.19044.2251 (fixed in 10.0.19044.2251)
• Microsoft Windows 10 22h2: before 10.0.19045.2486 (fixed in 10.0.19045.2486)
• Microsoft Windows 11 21h2: before 10.0.22000.1219 (fixed in 10.0.22000.1219)
• Microsoft Windows 11 22h2: before 10.0.22000.819 (fixed in 10.0.22000.819)
• Microsoft Windows 8.1: affected versions not specified
• Microsoft Windows Rt 8.1: affected versions not specified
• Microsoft Windows Server 2012: affected versions not specified; version r2 only
• Microsoft Windows Server 2016: affected versions not specified
• Microsoft Windows Server 2019: affected versions not specified
• Microsoft Windows Server 2022: affected versions not specified

Published 2023-04-27. Last modified 2026-06-17.