CVE-2023-21822
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
An elevation of privilege vulnerability exists in the Windows Graphics Component. The description lacks technical details, but the vulnerability could allow an attacker to gain elevated privileges on the system.
Risk Assessment
The risk for the organization is potential privilege escalation by an attacker, which could lead to system compromise and access to sensitive data.
Recommendation
It is recommended to urgently apply security updates for the Windows Graphics Component to mitigate this vulnerability.
Other vulnerabilities in Windows Graphics Component
See all- CVE-2017-0014High
The Windows Graphics Component in Microsoft Office 2010 SP2 and various versions of Windows allows remote attackers to execute arbitrary code via a crafted website. This is a remote code execution vulnerability that is different from that described in CVE-2017-0108.
- CVE-2024-38250High
A vulnerability in the Windows Graphics Component allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.
- CVE-2024-38249High
Vulnerability in Windows Graphics Component allows elevation of privilege. An attacker could exploit it to gain higher privileges.
- CVE-2024-38247High
An elevation of privilege vulnerability in the Windows Graphics Component allows an attacker to gain higher privileges.
- CVE-2023-21804High
Elevation of privilege vulnerability in Windows Graphics Component. Could be exploited to gain elevated privileges.
- CVE-2022-41052High
Remote Code Execution vulnerability in Windows Graphics Component. Allows an attacker to execute code in the context of the current user.
- CVE-2021-34533High
Remote code execution vulnerability in Windows Graphics Component during font parsing. An attacker could exploit it to execute code.
- CVE-2021-34530High
Remote code execution vulnerability in the Windows Graphics Component. An attacker could exploit this flaw to execute arbitrary code in the context of the logged-on user.
- CVE-2021-26868High
Elevation of privilege vulnerability in the Windows Graphics Component. Allows an attacker to gain elevated privileges on the system.
- CVE-2021-26861High
Remote code execution vulnerability in the Windows Graphics Component. An attacker could exploit it to run arbitrary code on the affected system.
Original NVD description (English source)
Windows Graphics Component Elevation of Privilege Vulnerability