CVE-2023-29336: Win32k Elevation of Privilege Vulnerability

Overview

Severity

High (CVSS 7.8)

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Category

Elevation of Privilege

Exploit Status

Actively Exploited

Exploitation Likelihood

Detected

Patch Tuesday

2023-May

Released

2023-05-09

EPSS Score

79.46% (percentile: 99.1%)

CISA KEV

Listed — due 2023-05-30

FAQ

What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Known Exploits (2)

• Microsoft Win32K Privilege Escalation Vulnerability — added 2023-06-09T15:36:45Z
• Microsoft Win32K Privilege Escalation Vulnerability — added 2022-10-25T12:02:12Z

Detection & Weaponization (1 sources)

Maturity: Exploit

• GitHub PoC: 1 repositories

Affected Products (16)

Windows

• Windows 10 for 32-bit Systems
• Windows 10 for x64-based Systems
• Windows 10 Version 1607 for 32-bit Systems
• Windows 10 Version 1607 for x64-based Systems
• Windows Server 2016
• Windows Server 2016 (Server Core installation)

ESU

• Windows Server 2008 for 32-bit Systems Service Pack 2
• Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
• Windows Server 2008 for x64-based Systems Service Pack 2
• Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
• Windows Server 2008 R2 for x64-based Systems Service Pack 1
• Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
• Windows Server 2012
• Windows Server 2012 (Server Core installation)
• Windows Server 2012 R2
• Windows Server 2012 R2 (Server Core installation)

Security Updates (10)

• 5026382
• 5026363
• 5026408
• 5026427
• 5026413
• 5026426
• 5026419
• 5026411
• 5026415
• 5026409

Acknowledgments

Jan Vojtěšek, Milánek, and Luigino Camastra with Avast

Revision History

• 2023-05-09: Information published.