CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows CNG Key Isolation Service Privilege Escalation Vulnerability (CVE-2023-28229) Analysis and Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server deployments running the CNG Key Isolation (KeyIso) service
[Impact] Local authenticated attackers with low privileges can execute arbitrary code with SYSTEM privileges by running a specially crafted application
[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and restrict unauthorized local access
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability (CVE-2022-41125) Technical Advisory
[Affected Scope] Microsoft Windows operating systems including Windows 10, 11, and Windows Server 2012, 2016, 2019, 2022 utilizing the CNG Key Isolation service
[Impact] A local authenticated attacker can execute arbitrary code with SYSTEM privileges by running a specially crafted application, leading to complete system compromise
[Mitigation] Apply the official Microsoft Latest Cumulative Update (LCU) immediately and restrict local logon privileges for non-administrative users