CVE-2023-35855

CVE-2023-35855 is a critical buffer overflow vulnerability affecting Counter-Strike (version 8684 and earlier) that allows a malicious game server to execute arbitrary code on a remote client's machine. This vulnerability has a CVSS score of 9.8 (Critical) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability, requiring no user interaction. While there is no evidence of active exploitation, public exploit code, or inclusion in the CISA KEV catalog, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.