Actively exploited in the wild

Microsoft Windows Graphic Component Privilege Escalation Vulnerability

Microsoft - Windows · Listed in the CISA KEV since 2023-02-14. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2023-21823

HighCVSS 7.8KEV

Published: 14/02/2023(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.56%

92th percentile - higher than 92% of all known CVEs

Windows Graphics Component Remote Code Execution Vulnerability. Details are not provided in the description, but it allows remote code execution.

An attacker could remotely execute arbitrary code on the system, potentially leading to full system and data compromise.

It is recommended to immediately apply patches released by Microsoft for Windows.

Original NVD description (English source)

Windows Graphics Component Remote Code Execution Vulnerability