CVE-2023-23459

CVE-2023-23459 is a critical SQL Injection vulnerability affecting Microsoft Priority and Priority Software Windows, potentially allowing remote command execution. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating potential interest from threat actors.