CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-04-11
Windows CNG Key Isolation Service Privilege Escalation Vulnerability (CVE-2023-28229) Analysis and Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server deployments running the CNG Key Isolation (KeyIso) service
[Impact] Local authenticated attackers with low privileges can execute arbitrary code with SYSTEM privileges by running a specially crafted application
[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and restrict unauthorized local access