CVE-2023-21549

—

CVSS 3.1

8.8 high

EPSS

1%p71

Published

Jan 10, 2023 (Jan 10, 2023)

Modified

Jun 17, 2026

Description

Windows SMB Witness Service Elevation of Privilege Vulnerability

Vendors: microsoft
Products: windows 10 1607, windows 10 1809, windows 10 20h2, windows 10 21h2, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows 7, windows 8.1, windows rt 8.1, windows server 2012, windows server 2016
Weakness: CWE-285, CWE-269
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news5 stories

Week in review: ChatGPT as an infosec assistant, Google offers help to EU cybersecurity startups

Help Net SecurityJan 15, 00:00 UTC · Jan 15, 2023Policy & legal in the wildCVE-2023-21674 CVE-2023-21549 CVE-2023-20025+3 CVEs1

60

Over 100 CVEs Addressed in First Patch Tuesday of 2023

Infosecurity MagazineJan 11, 11:00 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21743 CVE-2023-21674 CVE-2023-21549+3 CVEs

60

Microsoft Patch Tuesday for January 2023 fixed actively exploited zero

Security AffairsJan 11, 08:05 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674 CVE-2023-21549 CVE-2023-21561+58 CVEs1

60

Microsoft Issues January 2023 Patch Tuesday Updates, Warns of Zero

The Hacker NewsJan 11, 06:34 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674 CVE-2022-41045 CVE-2022-41093+13 CVEs1

60

Microsoft plugs actively exploited zero-day hole (CVE-2023-21674)

Help Net SecurityJan 10, 00:00 UTC · Jan 10, 2023Exploit / PoC in the wildCVE-2023-21674 CVE-2023-21549 CVE-2023-21743+4 CVEs1

60