CVE-2023-32046

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2023-32046 is an elevation of privilege vulnerability in the Windows MSHTML Platform. It carries a CVSS 3.1 base score of 7.8 with the vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H and was published on 11 July 2023.

An attacker with the ability to run code on a local system can exploit the flaw by convincing a user to interact with specially crafted content, resulting in the attacker gaining elevated privileges equivalent to those of the targeted user account.

Microsoft has published remediation guidance through its Security Response Center update guide, and the vulnerability appears in the CISA Known Exploited Vulnerabilities catalog.

The associated EPSS score has remained steady at a peak of 0.4266 since disclosure, indicating sustained but not sharply increasing exploitation interest.