CVE-2023-21674

CVE Published 2023-01-10
Related CWE(s) CWE-416: Use After Free
Related Vendor(s) microsoft
Related Product(s) windows_10_1507, windows_10_21h2, windows_server_2012, windows_10_1809, windows_11_21h2, windows_10_1607, windows_server_2022, windows_11_22h2, windows_server_2019, windows_server_2016, windows_10_20h2, windows_rt_8.1, windows_10_22h2
Exploitation Reported (CISA KEV) 2023-01-10
CVSS 3 Base Score 8.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector LOCAL

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References