Lucene search
HistoryOct 10, 2023 - 6:15 p.m.
CVE-2023-36726
windows
internet key exchange
elevation of privilege
vulnerability
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
26.8%
Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability
Affected configurations
Node
microsoftwindows_10_1507Range<10.0.10240.20232x64
ORmicrosoftwindows_10_1507Range<10.0.10240.20232x86
ORmicrosoftwindows_10_1607Range<10.0.14393.6351x64
ORmicrosoftwindows_10_1607Range<10.0.14393.6351x86
ORmicrosoftwindows_10_1809Range<10.0.17763.4974
ORmicrosoftwindows_10_21h2Range<10.0.19041.3570
ORmicrosoftwindows_10_22h2Range<10.0.19045.3570
ORmicrosoftwindows_11_21h2Range<10.0.22000.2538
ORmicrosoftwindows_11_22h2Range<10.0.22621.2428
ORmicrosoftwindows_server_2008Matchr2sp1x64
ORmicrosoftwindows_server_2008Matchr2sp2
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
ORmicrosoftwindows_server_2016Match-
ORmicrosoftwindows_server_2019Match-
ORmicrosoftwindows_server_2022Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_10_1507 | * | cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:* |
| microsoft | windows_10_1507 | * | cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:* |
| microsoft | windows_10_1607 | * | cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:* |
| microsoft | windows_10_1607 | * | cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:* |
| microsoft | windows_10_1809 | * | cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:* |
| microsoft | windows_10_21h2 | * | cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* |
| microsoft | windows_10_22h2 | * | cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* |
| microsoft | windows_11_21h2 | * | cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:* |
| microsoft | windows_11_22h2 | * | cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* |
| microsoft | windows_server_2008 | r2 | cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* |
Related
mscve
mscve
cve
cve
CVE-2023-36726
2023-10-10 18:15:16
prion
prion
Privilege escalation
2023-10-10 18:15:00
cvelist
cvelist
mskb
mskb
October 10, 2023âKB5031416 (Monthly Rollup)
2023-10-10 07:00:00
October 10, 2023âKB5031411 (Security-only update)
2023-10-10 07:00:00
October 10, 2023âKB5031427 (Security-only update)
2023-10-10 07:00:00
nessus
nessus
KB5031411: Windows Server 2008 Security Update (October 2023)
2023-10-10 00:00:00
KB5031427: Windows Server 2012 Security Update (October 2023)
2023-10-10 00:00:00
KB5031441: Windows Server 2008 R2 Security Update (October 2023)
2023-10-10 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5031377)
2023-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5031354)
2023-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5031358)
2023-10-11 00:00:00
kaspersky
kaspersky
KLA61359 Multiple vulnerabilities in Microsoft Products (ESU)
2023-10-10 00:00:00
KLA61358 Multiple vulnerabilities in Microsoft Windows
2023-10-10 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - October 2023
2023-10-10 20:34:57
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
26.8%
Related for NVD:CVE-2023-36726