mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 17:21:36 +00:00
258 lines
9.5 KiB
JSON
258 lines
9.5 KiB
JSON
{
|
|
"id": "CVE-2023-21823",
|
|
"sourceIdentifier": "secure@microsoft.com",
|
|
"published": "2023-02-14T21:15:12.297",
|
|
"lastModified": "2024-11-21T07:43:43.367",
|
|
"vulnStatus": "Undergoing Analysis",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Windows Graphics Component Remote Code Execution Vulnerability"
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo del componente de gr\u00e1ficos de Windows"
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "secure@microsoft.com",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
|
"baseScore": 7.8,
|
|
"baseSeverity": "HIGH",
|
|
"attackVector": "LOCAL",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "LOW",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"availabilityImpact": "HIGH"
|
|
},
|
|
"exploitabilityScore": 1.8,
|
|
"impactScore": 5.9
|
|
}
|
|
]
|
|
},
|
|
"cisaExploitAdd": "2023-02-14",
|
|
"cisaActionDue": "2023-03-07",
|
|
"cisaRequiredAction": "Apply updates per vendor instructions.",
|
|
"cisaVulnerabilityName": "Microsoft Windows Graphic Component Privilege Escalation Vulnerability",
|
|
"weaknesses": [
|
|
{
|
|
"source": "secure@microsoft.com",
|
|
"type": "Secondary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-190"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-190"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
|
|
"versionEndExcluding": "10.0.10240.19747",
|
|
"matchCriteriaId": "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
|
|
"versionEndExcluding": "10.0.10240.19747",
|
|
"matchCriteriaId": "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
|
|
"versionEndExcluding": "10.0.14393.5717",
|
|
"matchCriteriaId": "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
|
|
"versionEndExcluding": "10.0.14393.5717",
|
|
"matchCriteriaId": "8C826787-EBA0-4087-9F36-30B8192B2056"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
|
|
"versionEndExcluding": "10.0.17763.4010",
|
|
"matchCriteriaId": "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
|
|
"versionEndExcluding": "10.0.17763.4010",
|
|
"matchCriteriaId": "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
|
|
"versionEndExcluding": "10.0.17763.4010",
|
|
"matchCriteriaId": "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
|
|
"versionEndExcluding": "10.0.19042.2604",
|
|
"matchCriteriaId": "FC73806E-125C-470E-8123-945B9366BB24"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
|
|
"versionEndExcluding": "10.0.19042.2604",
|
|
"matchCriteriaId": "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
|
|
"versionEndExcluding": "10.0.19042.2604",
|
|
"matchCriteriaId": "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
|
|
"versionEndExcluding": "10.0.19044.2604",
|
|
"matchCriteriaId": "9F74B22E-55BC-4646-95D5-049099ED1DEC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
|
|
"versionEndExcluding": "10.0.19044.2604",
|
|
"matchCriteriaId": "0721D979-707D-4EE6-ABC7-5957D8F50391"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
|
|
"versionEndExcluding": "10.0.19044.2604",
|
|
"matchCriteriaId": "EB662E36-78A1-4004-AE03-F5693C1BED2A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
|
|
"versionEndExcluding": "10.0.19045.2604",
|
|
"matchCriteriaId": "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
|
|
"versionEndExcluding": "10.0.19045.2604",
|
|
"matchCriteriaId": "8FD8C3D8-808A-4A01-921D-243F8317F694"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
|
|
"versionEndExcluding": "10.0.19045.2604",
|
|
"matchCriteriaId": "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
|
|
"versionEndExcluding": "10.0.22000.1574",
|
|
"matchCriteriaId": "8E0C624C-A725-425E-BE3C-43CA28379263"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
|
|
"versionEndExcluding": "10.0.22000.1574",
|
|
"matchCriteriaId": "D39AA669-F9A5-4678-AE40-F6362BA95C71"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
|
|
"versionEndExcluding": "10.0.22621.1265",
|
|
"matchCriteriaId": "9689E7AA-B2EA-428C-945F-54935922861D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
|
|
"versionEndExcluding": "10.0.22621.1265",
|
|
"matchCriteriaId": "C819525C-9D6E-4097-9D48-6E2131B3FD90"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
|
|
"matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
|
|
"matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
|
|
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21823",
|
|
"source": "secure@microsoft.com",
|
|
"tags": [
|
|
"Patch",
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21823",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Patch",
|
|
"Vendor Advisory"
|
|
]
|
|
}
|
|
]
|
|
} |