CVE-2023-21823

{"id": "CVE-2023-21823", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2023-02-14T21:15:12.297", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21823", "tags": ["Patch", "Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-190"}]}, {"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "Windows Graphics Component Remote Code Execution Vulnerability"}], "lastModified": "2024-08-14T15:23:26.127", "cisaActionDue": "2023-03-07", "cisaExploitAdd": "2023-02-14", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "C1BEE482-6A48-4238-B435-5F9EEC091ADA", "versionEndExcluding": "10.0.10240.19747"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3", "versionEndExcluding": "10.0.10240.19747"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "A4F0F6D2-7E7B-4E3E-B160-65038A850B34", "versionEndExcluding": "10.0.14393.5717"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "8C826787-EBA0-4087-9F36-30B8192B2056", "versionEndExcluding": "10.0.14393.5717"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "E65DF61A-C497-4545-B95E-11E2FAFE1F2D", "versionEndExcluding": "10.0.17763.4010"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "3658090D-8E87-4CE4-BAE5-A7ADED6DC296", "versionEndExcluding": "10.0.17763.4010"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71", "versionEndExcluding": "10.0.17763.4010"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "FC73806E-125C-470E-8123-945B9366BB24", "versionEndExcluding": "10.0.19042.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2", "versionEndExcluding": "10.0.19042.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8", "versionEndExcluding": "10.0.19042.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "9F74B22E-55BC-4646-95D5-049099ED1DEC", "versionEndExcluding": "10.0.19044.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "0721D979-707D-4EE6-ABC7-5957D8F50391", "versionEndExcluding": "10.0.19044.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "EB662E36-78A1-4004-AE03-F5693C1BED2A", "versionEndExcluding": "10.0.19044.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208", "versionEndExcluding": "10.0.19045.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "8FD8C3D8-808A-4A01-921D-243F8317F694", "versionEndExcluding": "10.0.19045.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36", "versionEndExcluding": "10.0.19045.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "8E0C624C-A725-425E-BE3C-43CA28379263", "versionEndExcluding": "10.0.22000.1574"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "D39AA669-F9A5-4678-AE40-F6362BA95C71", "versionEndExcluding": "10.0.22000.1574"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "9689E7AA-B2EA-428C-945F-54935922861D", "versionEndExcluding": "10.0.22621.1265"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "C819525C-9D6E-4097-9D48-6E2131B3FD90", "versionEndExcluding": "10.0.22621.1265"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com", "cisaRequiredAction": "Apply updates per vendor instructions.", "cisaVulnerabilityName": "Microsoft Windows Graphic Component Privilege Escalation Vulnerability"}