CVE-2023-21560

—1

CVSS 3.1

6.6 medium

EPSS

1%p65

Published

Jan 10, 2023 (Jan 10, 2023)

Modified

Jun 17, 2026

Description

Windows Boot Manager Security Feature Bypass Vulnerability

Vendors: microsoft
Products: windows 10 1607, windows 10 1809, windows 10 20h2, windows 10 21h2, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012
Weakness: CWE-122, CWE-863
Vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news2 stories

Microsoft Patch Tuesday for January 2023 fixed actively exploited zero

Security AffairsJan 11, 08:05 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674 CVE-2023-21549 CVE-2023-21561+58 CVEs1

60

Microsoft plugs actively exploited zero-day hole (CVE-2023-21674)

Help Net SecurityJan 10, 00:00 UTC · Jan 10, 2023Exploit / PoC in the wildCVE-2023-21674 CVE-2023-21549 CVE-2023-21743+4 CVEs1

60