Exploitation Summary
CVE-2023-21674 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added January 10, 2023. EIP tracks 1 public exploit from researchers including hd3s5aa.
AI-analyzed exploit summary This is a working proof-of-concept exploit for CVE-2023-21674, a Windows ALPC vulnerability leading to a use-after-free (UAF) condition. The exploit demonstrates privilege escalation by manipulating worker factory objects and ALPC ports to trigger the vulnerability.
Description
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Exploits (1)
This is a working proof-of-concept exploit for CVE-2023-21674, a Windows ALPC vulnerability leading to a use-after-free (UAF) condition. The exploit demonstrates privilege escalation by manipulating worker factory objects and ALPC ports to trigger the vulnerability.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H