CVE-2023-38831

Vulnerability Identifier CVE-2023-38831

Microsoft’s Urgent Patch Addresses Critical Windows RCE Vulnerability

Nov 4, 2025

—

by

Lara De Jong

in Cyber News & Updates

Microsoft has released an emergency out-of-band patch to address a critical remote code execution (RCE) vulnerability in Windows (CVE-2023-38831). The issue, discovered by Google TAG and attributed to North Korea-linked “Royal Icing,” is actively exploited and allows attackers to execute arbitrary code. Users are urged to apply the patch immediately and exercise caution with suspicious…