CVE-2023-23410

Deeper analysis

CVE-2023-23410 is an elevation of privilege vulnerability in the Windows HTTP.sys kernel-mode driver. The flaw carries a CVSS 3.1 score of 7.8 and is associated with CWE-190 integer overflow or wraparound, allowing an authenticated local attacker to obtain higher privileges on affected Windows systems.

An attacker with low-privileged local access and no user interaction can exploit the issue to achieve full control over confidentiality, integrity, and availability on the target host. The attack vector is strictly local, limiting remote exploitation without prior code execution or credential access on the system.

Microsoft has published guidance and patches for the vulnerability through its Security Response Center at the referenced advisory URL. Administrators are expected to apply the vendor updates to eliminate the exposure.

EPSS for the CVE rose from lower values to a peak of 0.3042 before receding to the current score of 0.1479, indicating a period of increased exploitation interest after disclosure.