CVE-2023-21804
published 2023-02-14CVE-2023-21804: Windows Graphics Component Elevation of Privilege Vulnerability
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.42%
34.3th percentile
Windows Graphics Component Elevation of Privilege Vulnerability
Affected
36 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_10 | < 10.0.10240.19747 | 10.0.10240.19747 |
| microsoft | windows_10_1607 | < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft | windows_10_1809 | < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft | windows_10_20h2 | < 10.0.19042.2604 | 10.0.19042.2604 |
| microsoft | windows_10_21h2 | < 10.0.19044.2604 | 10.0.19044.2604 |
| microsoft | windows_10_22h2 | < 10.0.19045.2604 | 10.0.19045.2604 |
| microsoft | windows_10_version_1507 | >= 10.0.10240.0 < 10.0.10240.19747 | 10.0.10240.19747 |
| microsoft | windows_10_version_1607 | >= 10.0.14393.0 < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft | windows_10_version_1809 | >= 10.0.0 < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft | windows_10_version_1809 | >= 10.0.17763.0 < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft | windows_10_version_20h2 | >= 10.0.0 < 10.0.19042.2604 | 10.0.19042.2604 |
| microsoft | windows_10_version_21h2 | >= 10.0.19043.0 < 10.0.19044.2604 | 10.0.19044.2604 |
| microsoft | windows_10_version_22h2 | >= 10.0.19045.0 < 10.0.19045.2604 | 10.0.19045.2604 |
| microsoft | windows_11_21h2 | < 10.0.22000.1574 | 10.0.22000.1574 |
| microsoft | windows_11_22h2 | < 10.0.22621.1265 | 10.0.22621.1265 |
| microsoft | windows_11_version_21h2 | >= 10.0.0 < 10.0.22621.1574 | 10.0.22621.1574 |
| microsoft | windows_11_version_22h2 | >= 10.0.22621.0 < 10.0.22621.1265 | 10.0.22621.1265 |
| microsoft | windows_server_2012 | — | — |
| microsoft | windows_server_2012 | >= 6.2.9200.0 < 6.2.9200.24116 | 6.2.9200.24116 |
| microsoft | windows_server_2012_r2 | >= 6.3.9600.0 < 6.3.9600.20821 | 6.3.9600.20821 |
| microsoft | windows_server_2016 | >= 10.0.14393.0 < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft | windows_server_2019 | >= 10.0.17763.0 < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft | windows_server_2022 | >= 10.0.20348.0 < 10.0.20348.1547 | 10.0.20348.1547 |
| msrc | windows_10 | — | — |
| msrc | windows_10_version_1607 | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_msrc7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-78q6-cm7h-8gfm: Windows Graphics Component Elevation of Privilege Vulnerability
ghsa_unreviewed·2023-02-14
CVE-2023-21804 [HIGH] GHSA-78q6-cm7h-8gfm: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
Microsoft
Windows Graphics Component Elevation of Privilege Vulnerability
vendor_msrc·2023-02-14·CVSS 7.8
CVE-2023-21804 [HIGH] CWE-122 Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
FAQ: What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
Microsoft Graphics Component: Microsoft Graphics Component
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Elevation of Privilege
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5022840
Reference: https://support.microsoft.com/help/5022840
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5022842
Reference: https://support.microsoft.com/help/5022842
Reference: https://ca
No detection rules found.
No public exploits indexed.
Qualys
The February 2023 Patch Tuesday Security Update Review
blogs_qualys·2023-02-15
The February 2023 Patch Tuesday Security Update Review
## Table of Contents
Microsoft Patches for February2023
Adobe Patches for February2023
Notable and Critical Microsoft Vulnerabilities Patched
Other Microsoft Vulnerability Highlights
Microsoft Release Summary
Discover and Prioritize Vulnerabilities in Vulnerability Management, Detection & Response (VMDR)
Rapid Response with Patch Management (PM)
EVALUATE Vendor-Suggested Mitigation with Policy Compliance (PC)
Qualys Monthly Webinar Series
This Month in Vulnerabilities & Patches
Microsoft and Adobe have released several monthly security fixes and updates for their products. Let’s take a look at the highlights of this month’s Patch Tuesday as we review and discuss the security updates.
## Microsoft Patches for February 2023
Microsoft has patched 79 vulnerabilities this month, in
Qualys
The February 2023 Patch Tuesday Security Update Review | Qualys
blogs_qualys·2023-02-15
The February 2023 Patch Tuesday Security Update Review | Qualys
#### Table of Contents
- Microsoft Patches for February2023
- Adobe Patches for February2023
- Notable and Critical Microsoft Vulnerabilities Patched
- Other Microsoft Vulnerability Highlights
- Microsoft Release Summary
- Discover and Prioritize Vulnerabilities in Vulnerability Management, Detection & Response (VMDR)
- Rapid Response with Patch Management (PM)
- EVALUATE Vendor-Suggested Mitigation with Policy Compliance (PC)
- Qualys Monthly Webinar Series
- This Month in Vulnerabilities & Patches
Microsoft and Adobe have released several monthly security fixes and updates for their products. Let’s take a look at the highlights of this month’s Patch Tuesday as we review and discuss the security updates.
## Microsoft Patches for February 2023
Microsoft has patched 79 vulnerabilities t
2023-02-14
Published