PT-2022-5849 · Microsoft · Windows Graphics +1

🗓️ 13 Dec 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Insufficient access in Windows Graphics allows privilege escalation, no fix available yet.

Reporter	Title	Published	Views	Family All 89
ATTACKERKB	CVE-2023-21674	10 Jan 202300:00	–	attackerkb
ATTACKERKB	CVE-2022-44680	13 Dec 202219:15	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday January 2023: ALPC EoP, Win Backup EoP, LocalPotato, Exchange, Remote RCEs	13 Jan 202314:14	–	avleonov
BDU FSTEC	The vulnerability of the Windows Graphics component in Windows operating systems allows attackers to exploit their privileges.	16 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.	12 Jan 202300:00	–	bdu_fstec
Circl	CVE-2023-21674	10 Jan 202321:37	–	circl
CISA KEV Catalog	Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability	10 Jan 202300:00	–	cisa_kev
CNNVD	Microsoft Graphics Component 安全漏洞	13 Dec 202200:00	–	cnnvd
CNNVD	Microsoft Windows ALPC 安全漏洞	10 Jan 202300:00	–	cnnvd
CVE	CVE-2022-44680	13 Dec 202200:00	–	cve

Source	Link
github	www.github.com/MzHmO/Exploit-Street/tree/main/2023/CVE-2023-21674
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2022-07264
msrc	www.msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-44680
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44680
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-44680
bdu	www.bdu.fstec.ru/vul/2023-00065
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
t	www.t.me/cibsecurity/54457
t	www.t.me/cvenotify/39984

10 Mar 2023 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.8 - 8.8

EPSS0.19707

SSVC

windows graphics component privilege escalation vulnerability insufficient access recommendations