Windows Graphics Component Remote Code Execution VulnerabilityVendor advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21823 CVE-2023-21823
HIGHCISA KEV
Windows Graphics Component Remote Code Execution Vulnerability
Record summary
CVE-2023-21823 has a selected CVSS score of 7.8 (high); EIP currently links 1 repository PoC. CISA lists CVE-2023-21823 in KEV.
Description
Windows Graphics Component Remote Code Execution Vulnerability
Description source: GitHub Advisory
Exploitation context
Known exploitation
- CISA KEV
- Listed · Feb 14, 2023 · CISA
- VulnCheck KEV
- Listed · Feb 14, 2023 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Available material
- Repository PoCs
- 1
CISA SSVC decision
ExploitationActive
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 5, 2024 · Source: CVE List
Affected products and versions
Showing 12 of 25| Product | Source | Version range | Status |
|---|---|---|---|
Microsoft Office for AndroidBrowse Microsoft / Microsoft Office for Android | CVE List | 16.0.1 to < 16.0.16130.20156 | affected |
Microsoft Office for UniversalBrowse Microsoft / Microsoft Office for Universal | CVE List | 16.0.1 to < 16.0.14326.21330 | affected |
Microsoft Office for iOSBrowse Microsoft / Microsoft Office for iOS | CVE List | 2.0.0 to < 2.70.23021003 | affected |
WindowsBrowse Microsoft / Windows | CISA | Version data not supplied | |
Windows 10 Version 1507Browse Microsoft / Windows 10 Version 1507 | CVE List | 10.0.10240.0 to < 10.0.10240.19747 | affected |
Windows 10 Version 1607Browse Microsoft / Windows 10 Version 1607 | CVE List | 10.0.14393.0 to < 10.0.14393.5717 | affected |
Windows 10 Version 1809Browse Microsoft / Windows 10 Version 1809 | CVE List | 10.0.17763.0 to < 10.0.17763.4010 | affected |
| 10.0.0 to < 10.0.17763.4010 | affected | ||
Windows 10 Version 20H2Browse Microsoft / Windows 10 Version 20H2 | CVE List | 10.0.0 to < 10.0.19042.2604 | affected |
Windows 10 Version 21H2Browse Microsoft / Windows 10 Version 21H2 | CVE List | 10.0.19043.0 to < 10.0.19044.2604 | affected |
Windows 10 Version 22H2Browse Microsoft / Windows 10 Version 22H2 | CVE List | 10.0.19045.0 to < 10.0.19045.2604 | affected |
Windows 11 version 21H2Browse Microsoft / Windows 11 version 21H2 | CVE List | 10.0.0 to < 10.0.22621.1574 | affected |
Windows 11 version 22H2Browse Microsoft / Windows 11 version 22H2 | CVE List | 10.0.22621.0 to < 10.0.22621.1265 | affected |
Proofs of concept
1Repository PoCs
GitHubElizarfish/CVE-2023-21823Repository PoCby ElizarfishStars: 14Not analyzed2 files
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-21823 cisa.govGovernment resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21823