Actively exploited in the wild
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2023-01-10. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2023-21674
HighCVSS 8.8KEVSummary
An Elevation of Privilege vulnerability in Windows Advanced Local Procedure Call (ALPC). It could allow an attacker to escalate privileges on a Windows system.
Risk Assessment
An attacker could gain higher privileges on the system, potentially leading to system takeover and arbitrary actions.
Recommendation
Apply the latest Windows security updates provided by Microsoft.
Other vulnerabilities in Windows ALPC
See all- CVE-2026-85880HighActively exploited
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
- CVE-2026-69874High
An untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
- CVE-2026-69834High
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
- CVE-2022-41100High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
- CVE-2022-41093High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
- CVE-2022-41045High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
Original NVD description (English source)
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability