Actively exploited · Published Jul 11, 2023 · Assigned by microsoft
CVE-2023-32046Windows MSHTML Platform Elevation of Privilege Vulnerability
High 7.8 Exploited
In plain English
A high-severity security flaw in Windows 10 Version 1507 from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on July 11, 2023). The chance it is exploited in the next 30 days is estimated at 10.0% (higher than 96% of all known vulnerabilities). Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)10.0%top 4.4% of all CVEs
Exploited in the wildYesCISA KEV since Jul 11, 2023
Attack toolingNoneno public tooling known
CISA guidance
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Federal agencies must remediate by Aug 1, 2023.
Official description
Windows MSHTML Platform Elevation of Privilege Vulnerability
Affected products (as reported)
References
- Windows MSHTML Platform Elevation of Privilege Vulnerability vendor-advisory
- http://seclists.org/fulldisclosure/2023/Jul/43 x_transferred
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32046 government-resource