CVE-2023-21724

—

CVSS 3.1

7.8 high

EPSS

<1%p41

Published

Jan 10, 2023 (Jan 10, 2023)

Modified

Jun 17, 2026

Description

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Vendors: microsoft
Products: windows 10 20h2, windows 10 21h2, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows server 2022
Weakness: CWE-416
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news1 stories

Microsoft Patch Tuesday for January 2023 fixed actively exploited zero

Security AffairsJan 11, 08:05 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674 CVE-2023-21549 CVE-2023-21561+58 CVEs1

60