CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-05-09
Windows Win32k Elevation of Privilege Vulnerability (CVE-2023-29336) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the Win32k kernel driver.
[Impact] A local attacker can exploit a Use-After-Free (UAF) vulnerability to corrupt kernel memory, leading to arbitrary code execution with SYSTEM privileges.
[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and enhance monitoring for Indicators of Compromise (IoCs).