CVE-2023-21551

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-21551
Microsoft Cryptographic Services Elevation of Privilege Vulnerability

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21551
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*
History

27 Apr 2023, 19:15

Type Values Removed Values Added
References
  • {'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21551', 'name': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21551', 'tags': ['Patch', 'Vendor Advisory'], 'refsource': 'MISC'}
  • (MISC) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21551 -
Summary Microsoft Cryptographic Services Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21561, CVE-2023-21730. Microsoft Cryptographic Services Elevation of Privilege Vulnerability

17 Jan 2023, 18:01

Type Values Removed Values Added
First Time Microsoft windows 10 21h2
Microsoft windows 11 22h2
Microsoft windows 10 1809
Microsoft
Microsoft windows 11 21h2
Microsoft windows Server 2019
Microsoft windows 10 22h2
Microsoft windows 10 20h2
Microsoft windows Server 2022
CWE CWE-269
CPE cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*
References (MISC) https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21551 - (MISC) https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21551 - Patch, Vendor Advisory

10 Jan 2023, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-01-10 22:15

Updated : 2023-12-10 14:48

NVD link : CVE-2023-21551

Mitre link : CVE-2023-21551

CVE.ORG link : CVE-2023-21551

JSON object : View

Products Affected

microsoft

  • windows_10_21h2
  • windows_10_1809
  • windows_11_21h2
  • windows_10_20h2
  • windows_11_22h2
  • windows_server_2019
  • windows_server_2022
  • windows_10_22h2
CWE
CWE-269

Improper Privilege Management