MSRC-CVE-2023-28246 — Windows Registry Elevation of Privilege Vulnerability

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could gain specific limited SYSTEM privileges.

Security updates
10.0.20348.1668 — https://support.microsoft.com/help/5025230
10.0.22000.1817 — https://support.microsoft.com/help/5025224
10.0.22621.1555 — https://support.microsoft.com/help/5025239

Vulnerabilities 1

High 7.8

CVE-2023-28246

Windows Registry Elevation of Privilege Vulnerability

Windows Registry Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 11 version 22H2 Windows 11 version 21H2 Windows

Apr 11, 2023

Revision history

2023-04-11 #1
Information published.

References

CVE-2023-28246 Windows Registry Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28246
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss