CVE-2023-24902 — Out-of-bounds Read in Microsoft Windows 11 Version 21h2

CWE-125 — Out-of-bounds Read4 documents3 sources
Severity
7.8HIGHCNA
No vector
EPSS
2.4%
top 14.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Microsoft Windows 11 Version 21h2Microsoft Windows 11 Version 22h2Msrc Windows 11 Version 21h2 FOR Arm64-based Systems+3 more
Timeline
PublishedMay 9

Description

Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability

Affected Packages6 packages

▶CVEListV5microsoft/windows_11_version_21h210.0.0 — 10.0.22000.1936
▶CVEListV5microsoft/windows_11_version_22h210.0.22621.0 — 10.0.22621.1702

🔴Vulnerability Details

1
CVEList
Win32k Elevation of Privilege Vulnerability↗2023-05-09
▶

📋Vendor Advisories

1
Microsoft
Win32k Elevation of Privilege Vulnerability↗2023-05-09
▶

🕵️Threat Intelligence

2
Qualys
Microsoft and Adobe Patch Tuesday, May 2023 Security Update Review↗2023-05-09
▶
Qualys
Microsoft Patch Tuesday, May 2023 Security Update Review | Qualys↗2023-05-09
▶
CVE-2023-24902 — Out-of-bounds Read in Microsoft | cvebase