Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-24910

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Windows 10 Version 1809
Windows Server 2019
Windows Server 2019 (server Core Installation)
Windows Server 2022
Vendor
CVE Published:
14 March 2023

What is CVE-2023-24910?

The Windows Graphics Component has a vulnerability that enables attackers to elevate their privileges on affected systems. This flaw may allow a malicious actor to execute arbitrary code with heightened privileges. Users are encouraged to apply necessary security updates promptly to mitigate the risks associated with this vulnerability.

Affected Version(s)

Microsoft Office 2019 for Mac Unknown 16.0.0 < 16.71.23031200

Microsoft Office for Android Unknown 16.0.1 < 16.0.16026.20172

Microsoft Office for Universal Unknown 16.0.1 < 16.0.14606.20000

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.