Public proof-of-concept released for patched Windows WinSock privilege escalation flaw CVE-2023-21768
VULNERABILITYCVE-2023-21768redteam/daily · 1 source
- Severity
- High
- Exploited
- Yes
- Sources
- 1
What happened
A public proof-of-concept exploit for CVE-2023-21768 targets the afd.sys Windows kernel driver and lets a local user with low privileges gain SYSTEM rights, with the full chain reported working on Windows 11 22H2. Microsoft patched the flaw in January 2023, and IBM published the researchers' analysis on 21 March 2023. The exploit does not provide a direct remote route in.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Verify that all affected Windows devices have received Microsoft's January 2023 fix for CVE-2023-21768 or a later applicable update.
- Do not treat HVCI as a replacement for applying the patch.
Written by AI from the sources, checked against them
Vulnerabilities
Full story timeline · 3 updates
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Products