Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21754
Key Information:
- Vendor
- Microsoft
- Status
- Vendor
- CVE Published:
- 10 January 2023
Summary
A vulnerability exists in the Windows Kernel that allows an attacker to gain elevated privileges, potentially leading to unauthorized actions within the system. This weakness can be exploited if an attacker runs a specially crafted application on the targeted system. Successful exploitation could allow attackers to install programs, view, change, or delete data, or create new accounts with full user rights. It is crucial for users to apply the recommended patches to mitigate this security risk.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.19685
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.5648
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.3887
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved