Home Microsoft CVE-2023-29363
Back to Microsoft

CVE-2023-29363

Windows - Pragmatic General Multicast (PGM)

Microsoft CVSS 9.8 Updated March 18, 2026

Executive Risk Summary

"A remote code execution vulnerability exists in Windows Pragmatic General Multicast (PGM) due to the improper handling of multicast packets, allowing an attacker to execute arbitrary code on the target system. This vulnerability can be exploited by sending specially crafted packets to a vulnerable Windows system, potentially leading to a complete system compromise."

Operational Audit Arsenal

Target Type Dynamic Link Library
Target Asset pgm.dll
Standard Path %windir%\System32
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: pgm.dll (Dynamic Link Library)
$Targets = 'pgm.dll'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Moderate

Internal Work Notes

Apply Windows update to patch CVE-2023-29363, which fixes a remote code execution vulnerability in the Pragmatic General Multicast (PGM) component. Use the following PowerShell command to verify the patch status: Get-HotFix -Id KB5014754

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Microsoft Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.