CVE-2023-36720: 
vulnerability analysis and mitigation

Windows Mixed Reality Developer Tools Denial of Service Vulnerability (CVE-2023-36720) was identified and disclosed on June 26, 2023. This vulnerability affects multiple versions of Microsoft Windows operating systems, including Windows 10 (versions 1607, 1809, 21H2, 22H2), Windows 11 (versions 21H2, 22H2), and Windows Server (2016, 2019, 2022) (CVE Details).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. This indicates that the vulnerability can be exploited over the network, requires low attack complexity, needs no privileges, requires no user interaction, and has a high impact on availability (NVD).

The primary impact of this vulnerability is on system availability, potentially leading to denial of service conditions in affected Windows Mixed Reality Developer Tools. The vulnerability has a high impact rating for availability while maintaining no direct impact on confidentiality or integrity (Rapid7).

Microsoft has released security updates to address this vulnerability through various KB patches including KB5031362 for Windows 10 1607, KB5031361 for Windows 10 1809, KB5031356 for Windows 10 21H2/22H2, KB5031358 for Windows 11 21H2, KB5031354 for Windows 11 22H2, and KB5031364 for Windows Server 2022 (Rapid7).