CVE-2023-21688
published 2023-02-14CVE-2023-21688: NT OS Kernel Elevation of Privilege Vulnerability NT OS Kernel Elevation of Privilege Vulnerability
high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
3.60%
88.2th percentile
NT OS Kernel Elevation of Privilege Vulnerability
NT OS Kernel Elevation of Privilege Vulnerability
Affected
31 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_10_version_1507 | >= 10.0.10240.0 < 10.0.10240.19747 | 10.0.10240.19747 |
| microsoft | windows_10_version_1607 | >= 10.0.14393.0 < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft | windows_10_version_1809 | >= 10.0.0 < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft | windows_10_version_1809 | >= 10.0.17763.0 < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft | windows_10_version_20h2 | >= 10.0.0 < 10.0.19042.2604 | 10.0.19042.2604 |
| microsoft | windows_10_version_21h2 | >= 10.0.19043.0 < 10.0.19044.2604 | 10.0.19044.2604 |
| microsoft | windows_10_version_22h2 | >= 10.0.19045.0 < 10.0.19045.2604 | 10.0.19045.2604 |
| microsoft | windows_11_version_21h2 | >= 10.0.0 < 10.0.22621.1574 | 10.0.22621.1574 |
| microsoft | windows_11_version_22h2 | >= 10.0.22621.0 < 10.0.22621.1265 | 10.0.22621.1265 |
| microsoft | windows_server_2008_r2_service_pack_1 | >= 6.1.7601.0 < 6.1.7601.26366 | 6.1.7601.26366 |
| microsoft | windows_server_2008_service_pack_2 | >= 6.0.6003.0 < 6.0.6003.21915 | 6.0.6003.21915 |
| microsoft | windows_server_2012 | >= 6.2.9200.0 < 6.2.9200.24116 | 6.2.9200.24116 |
| microsoft | windows_server_2012_r2 | >= 6.3.9600.0 < 6.3.9600.20821 | 6.3.9600.20821 |
| microsoft | windows_server_2016 | >= 10.0.14393.0 < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft | windows_server_2019 | >= 10.0.17763.0 < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft | windows_server_2022 | >= 10.0.20348.0 < 10.0.20348.1547 | 10.0.20348.1547 |
| msrc | windows_10 | — | — |
| msrc | windows_10_version_1607 | — | — |
| msrc | windows_10_version_1809 | — | — |
| msrc | windows_10_version_20h2 | — | — |
| msrc | windows_10_version_21h2 | — | — |
| msrc | windows_10_version_22h2 | — | — |
| msrc | windows_11_version_21h2 | — | — |
| msrc | windows_11_version_22h2 | — | — |
| msrc | windows_server_2008 | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvelistv57.8HIGH
vendor_msrc7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
NT OS Kernel Elevation of Privilege Vulnerability
vendor_msrc·2023-02-14·CVSS 7.8
CVE-2023-21688 [HIGH] CWE-416 NT OS Kernel Elevation of Privilege Vulnerability
NT OS Kernel Elevation of Privilege Vulnerability
FAQ: What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
Windows ALPC: Windows ALPC
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Elevation of Privilege
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;DOS:N/A
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5022840
Reference: https://support.microsoft.com/help/5022840
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5022842
Reference: https://support.microsoft.com/help/5022842
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx
CVEList
NT OS Kernel Elevation of Privilege Vulnerability
cvelistv5·2023-02-14·CVSS 7.8
CVE-2023-21688 [HIGH] CWE-416 NT OS Kernel Elevation of Privilege Vulnerability
NT OS Kernel Elevation of Privilege Vulnerability
NT OS Kernel Elevation of Privilege Vulnerability
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-02-14
Published