Actively exploited · Published Feb 14, 2023 · Assigned by microsoft
CVE-2023-23376Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.8 Exploited Ransomware
In plain English
A high-severity heap buffer overflow in Windows 10 Version 1507 from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on February 14, 2023). It has been used in ransomware campaigns. The chance it is exploited in the next 30 days is estimated at 10.9% (higher than 96% of all known vulnerabilities). Apply updates per vendor instructions.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)10.9%top 4.1% of all CVEs
Exploited in the wildYesCISA KEV since Feb 14, 2023
Attack toolingNoneno public tooling known
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Mar 7, 2023.
Official description
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected products (as reported)
Weakness: CWE-122 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
References
- Windows Common Log File System Driver Elevation of Privilege Vulnerability vendor-advisory, patch
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23376 government-resource