CVE-2023-21823KEV · OVERDUECWE-190

Microsoft Windows Graphic Component Privilege Escalation Vulnerability

High · published February 15, 2023

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 92.8th percentile for exploit probability.

1327
days past CISA
deadline
CVSS v3.1
7.8
EPSS
6%
Percentile
92.8
In the wild
Confirmed
What it is

🚨 This Windows Graphics Component vulnerability lets attackers execute code remotely with a single malicious image! 💥 Think of it like a restaurant where the chef is actually following a recipe left by a rogue diner — once the order is in, they whip up something dangerous without realizing it. 🍽️ If exploited, an attacker could gain full control over the affected system, leading to unauthorized data access, malware installation, or even complete system compromise. This could be absolutely devastating for individuals and organizations alike! ⚡️

Put simply

Think of it like a restaurant where the chef is actually following a recipe left by a rogue diner — once the order is in, they whip up something dangerous without realizing it. 🍽️ The flaw lies in the way the Windows Graphics Component processes certain image files, allowing remote code execution via specially crafted images. This means an attacker can manipulate the graphics processing to run any code they choose.

What to do

If exploited, an attacker could gain full control over the affected system, leading to unauthorized data access, malware installation, or even complete system compromise. This could be absolutely devastating for individuals and organizations alike! ⚡️ To mitigate this risk, ensure your systems are patched to the latest security updates from Microsoft. Regularly review and tighten your network defenses to block untrusted image files and monitor for unusual activity! 🔒 You've got this! Stay proactive, patch those systems, and you'll be a security hero in no time! 🦸

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.05563 · 92.8th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2023-02-15T02:15Z
KEV added
2023-02-14 · due 2023-03-07
Affected products (28)
ProductVersionsFixed in
microsoft/windows_10_1507< 10.0.10240.1974710.0.10240.19747
microsoft/windows_10_1507< 10.0.10240.1974710.0.10240.19747
microsoft/windows_10_1607< 10.0.14393.571710.0.14393.5717
microsoft/windows_10_1607< 10.0.14393.571710.0.14393.5717
microsoft/windows_10_1809< 10.0.17763.401010.0.17763.4010
microsoft/windows_10_1809< 10.0.17763.401010.0.17763.4010
microsoft/windows_10_1809< 10.0.17763.401010.0.17763.4010
microsoft/windows_10_20h2< 10.0.19042.260410.0.19042.2604
microsoft/windows_10_20h2< 10.0.19042.260410.0.19042.2604
microsoft/windows_10_20h2< 10.0.19042.260410.0.19042.2604
microsoft/windows_10_21h2< 10.0.19044.260410.0.19044.2604
microsoft/windows_10_21h2< 10.0.19044.260410.0.19044.2604
microsoft/windows_10_21h2< 10.0.19044.260410.0.19044.2604
microsoft/windows_10_22h2< 10.0.19045.260410.0.19045.2604
microsoft/windows_10_22h2< 10.0.19045.260410.0.19045.2604
microsoft/windows_10_22h2< 10.0.19045.260410.0.19045.2604
microsoft/windows_11_21h2< 10.0.22000.157410.0.22000.1574
microsoft/windows_11_21h2< 10.0.22000.157410.0.22000.1574
microsoft/windows_11_22h2< 10.0.22621.126510.0.22621.1265
microsoft/windows_11_22h2< 10.0.22621.126510.0.22621.1265
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2016all versions—
microsoft/windows_server_2019all versions—
microsoft/windows_server_2022all versions—
References (3)
EPSS history
Timeline
  • 14 FEB 20:09Z
    Windows Graphics Component Remote Code Execution Vulnerability
    cvelistv5
  • 14 FEB 00:00Z
    Added to CISA KEV — remediate by Mar 7
    kev