CVE-2023-21746
Published: 10 January 2023
Summary
CVE-2023-21746 is a high-severity an unspecified weakness vulnerability in Microsoft Windows 10. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 2.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2023-21746 is an elevation-of-privilege vulnerability in the Windows NTLM implementation. It carries a CVSS 3.1 base score of 7.8 and is exploitable by a local attacker who already possesses low-privileged access; successful exploitation grants full control over confidentiality, integrity, and availability on the affected system.
An authenticated local user can abuse the flaw without user interaction to obtain higher privileges than intended, allowing the attacker to perform actions that would otherwise be restricted by NTLM security boundaries.
Microsoft has published remediation guidance and patches for the issue through its Security Response Center update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21746.
The vulnerability’s EPSS score reached a peak of 0.6149 and currently stands at 0.5374, indicating sustained moderate exploitation interest since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-25913
Vulnerability details
Windows NTLM Elevation of Privilege Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.