CVE-2023-21674

Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
34.2%
EPSS
98%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.

Vendor
Microsoft
Product
Windows
Added to KEV
Jan 10, 2023
Remediation due
Jan 31, 2023 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-416
EPSS
34.2% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded