Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21754

7.8HIGH

Key Information:

Summary

A vulnerability exists in the Windows Kernel that allows an attacker to gain elevated privileges, potentially leading to unauthorized actions within the system. This weakness can be exploited if an attacker runs a specially crafted application on the targeted system. Successful exploitation could allow attackers to install programs, view, change, or delete data, or create new accounts with full user rights. It is crucial for users to apply the recommended patches to mitigate this security risk.

Affected Version(s)

Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.19685

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.5648

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.3887

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.