CVE-2023-21678

—

CVSS 3.1

7.8 high

EPSS

<1%p46

Published

Jan 10, 2023 (Jan 10, 2023)

Modified

Jun 17, 2026

Description

Windows Print Spooler Elevation of Privilege Vulnerability

Vendors: microsoft
Products: windows 10 1607, windows 10 1809, windows 10 20h2, windows 10 21h2, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012
Weakness: CWE-59
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news2 stories

Microsoft Issues January 2023 Patch Tuesday Updates, Warns of Zero

The Hacker NewsJan 11, 06:34 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674 CVE-2022-41045 CVE-2022-41093+13 CVEs1

60

Microsoft Patch Tuesday, January 2023 Edition

Krebs on SecurityJan 11, 03:15 UTC · Jan 11, 2023Vulnerability CVE-2023-21743 CVE-2023-21674 CVE-2023-21678+3 CVEs

60