Actively exploited in the wild
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Microsoft - Windows CNG Key Isolation Service · Listed in the CISA KEV since 2023-10-04. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2023-28229
HighCVSS 7.0KEVSummary
A vulnerability in the Windows CNG Key Isolation Service allows elevation of privilege. The flaw enables a local attacker to gain higher privileges on the system.
Risk Assessment
It could lead to an attacker taking control of the system with administrative privileges, threatening the security of the entire infrastructure.
Recommendation
It is recommended to immediately apply the Windows security updates published by Microsoft.
Other vulnerabilities in Windows CNG Key Isolation Service
See all- CVE-2022-41125HighActively exploited
Elevation of privilege vulnerability in Windows CNG Key Isolation Service. An attacker could exploit it to gain elevated privileges.
- CVE-2023-35340High
A vulnerability in the Windows CNG Key Isolation Service allows for privilege escalation. An attacker can exploit this flaw to gain elevated privileges on the system.
Original NVD description (English source)
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability