7.8

CVE-2023-32046

Warnung

Windows MSHTML Platform Elevation of Privilege Vulnerability

Windows MSHTML Platform Elevation of Privilege Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 1507 Version < 10.0.10240.20048
Microsoft ≫ Windows 10 1607 Version < 10.0.14393.6085
Microsoft ≫ Windows 10 1809 Version < 10.0.17763.4645
Microsoft ≫ Windows 10 21h2 Version < 10.0.19041.3208
Microsoft ≫ Windows 10 22h2 Version < 10.0.19045.3208
Microsoft ≫ Windows 11 21h2 Version < 10.0.22000.2176
Microsoft ≫ Windows 11 22h2 Version < 10.0.22621.1992
Microsoft ≫ Windows Server 2008 Version - Update sp2
Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64

11.07.2023: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

Schwachstelle

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.

Beschreibung

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 10.05% 0.951
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Microsoft 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://seclists.org/fulldisclosure/2023/Jul/43
Broken Link
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32046
Patch
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32046
US Government Resource