Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.
Details
What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
Security updates
10.0.17763.4252 — https://support.microsoft.com/help/5025229
10.0.20348.1668 — https://support.microsoft.com/help/5025230
10.0.19042.2846 — https://support.microsoft.com/help/5025221
10.0.22000.1817 — https://support.microsoft.com/help/5025224
10.0.22621.1555 — https://support.microsoft.com/help/5025239
10.0.10240.19869 — https://support.microsoft.com/help/5025234
10.0.14393.5850 — https://support.microsoft.com/help/5025228
6.0.6003.22015 — https://support.microsoft.com/help/5025271
6.0.6003.22015 — https://support.microsoft.com/help/5025273
6.1.7601.26466 — https://support.microsoft.com/help/5025279
6.1.7601.26466 — https://support.microsoft.com/help/5025277
6.2.9200.24216 — https://support.microsoft.com/help/5025287
6.2.9200.24216 — https://support.microsoft.com/help/5025272
6.3.9600.20919 — https://support.microsoft.com/help/5025285
6.3.9600.20919 — https://support.microsoft.com/help/5025288
Vulnerabilities 1
-
High 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
Revision history
-
#1
Information published. This CVE was addressed by updates that were released in January 2023, but the CVE was inadvertently omitted from the January 2023 Security Updates. This is an informational change only. Customers who have already installed the January 2023 updates do not need to take any further action.
References
-
CVE-2023-24912 Windows Graphics Component Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24912
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss