CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-01-10
Windows ALPC (Advanced Local Procedure Call) Use-After-Free Elevation of Privilege Vulnerability (CVE-2023-21674) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the ALPC mechanism
[Impact] Successful exploitation allows a local attacker to bypass sandbox environments, elevate privileges to SYSTEM, and execute arbitrary code to fully compromise the host
[Mitigation] Immediately apply the official Microsoft cumulative security updates released in January 2023 or later