CVE-2023-21823

Windows Graphics Component Remote Code Execution Vulnerability

CVSS 7.8 HIGHEPSS 5.6%● KEVCWE-190

Vexday Risk Score

71High priority

SSVC decision (CISA)

Act

Exploitation + impact → act immediately

CVSS 7.8EPSS 5.6%KEV simPoC públicaNuclei —Metasploit —Patch referenciado

Lifecycle

14 Feb 2023Active exploitation (CISA KEV)

14 Feb 2023Published on NVD

20 Apr 2023Public PoC

Recommendation: Patch as soon as possible — active exploitation confirmed.

In short

A flaw in Windows Graphics Component allows attackers to run malicious code on a computer by exploiting an integer overflow vulnerability. This is dangerous because it can give attackers full control over your system without needing special permissions.

Technical detail

Integer overflow in Windows Graphics Component allows remote code execution through crafted input to graphics processing functions. Exploitation requires user interaction (opening a malicious file or visiting a compromised webpage) but results in code execution with the privileges of the affected process, potentially leading to system compromise.

Summary generated and translated by AI from the official description.

Windows Graphics Component Remote Code Execution Vulnerability

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C

Affected products

public PoCs found — 1

githubgithub.com/Elizarfish/CVE-2023-21823★ 14

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21823 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21823