Tuesday 3 November
Global

Your region, kept on this device.

Public proof-of-concept released for patched Windows WinSock privilege escalation flaw CVE-2023-21768

Severity
High
Exploited
Yes
Sources
1

Researchers have published computer code that shows how someone already logged into a Windows computer could take full control of it. fixed this flaw in January 2023, so the risk applies to machines that have not been updated.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

  1. Verify that all affected Windows devices have received Microsoft's January 2023 fix for CVE-2023-21768 or a later applicable update.
  2. Do not treat HVCI as a replacement for applying the patch.

Written by AI from the sources, checked against them

Vulnerabilities

Full story timeline · 3 updates

  1. Tue 13 AugustCVE-2024-38193 added to CISA’s exploited listCISA KEV
  2. Tue 13 MayCVE-2025-32709 added to CISA’s exploited listCISA KEV
  3. Mon 2 NovemberPOC Released for Windows WinSock Ancillary Privilege Escalation VulnerabilityCyber Security News

Who reported · 1 outlet

Cyber Security News

Who and what is in it

Companies

Products

Report a problem