7 matches found
LocalPotato_CVE-2023-21746
A local privilege escalation LPE vulnerability in Windows was reported to Microsoft on September 9, 2022, by Andrea Pierini @decoderit and Antonio Cocomazzi @splintercode. The vulnerability would allow an attacker with a low-privilege account on a host to read/write arbitrary files with SYSTEM...
VulnCheck KEV: CVE-2023-21746
Windows NTLM Elevation of Privilege Vulnerability...
CVE-2023-21746
Windows NTLM Elevation of Privilege Vulnerability...
CVE-2023-21746
Windows NTLM Elevation of Privilege Vulnerability...
CVE-2023-21746 Windows NTLM Elevation of Privilege Vulnerability
...
CVE-2023-21746
CVE-2023-21746 is a Privilege Escalation vulnerability in the Windows NTLM network authentication protocol. It stems from a defect in NTLM local authentication where a privileged process can be tricked into authenticating a session initiated by a low-privileged attacker against a local SMB server...
