CVE-2023-23376

CVE Published 2023-02-14
Related CWE(s) CWE-122: Heap-based Buffer Overflow
Related Vendor(s) microsoft
Related Product(s) windows_server_2008, windows_10_21h2, windows_server_2012, windows_10_1809, windows_11_21h2, windows_10, windows_10_1607, windows_server_2022, windows_11_22h2, windows_server_2019, windows_server_2016, windows_10_20h2, windows_10_22h2
Exploitation Reported (CISA KEV) 2023-02-14
CVSS 3 Base Score 7.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector LOCAL

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

Threat Reports Related to CVE-2023-23376

Report

We're All in this Together - A Year in Review of Zero-Days Exploited In-the-Wild in 2023

This report from Mandiant and Google Threat Analysis Group (TAG) presents combined analysis of zero day vulnerability exploitation in 2023. The ...

Associated CAPEC Patterns

References