CVE-2023-21674: Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

CVE ID

CVE-2023-21674

Vulnerability Name

Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

• Project: Microsoft
• Product: Windows

Date

• Date Added: 2023-01-10
• Due Date: 2023-01-31

Description

Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21674; https://nvd.nist.gov/vuln/detail/CVE-2023-21674

Related Security News

• Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

More CVEs Info

Common Vulnerabilities & Exposures (CVE) List