CVE-2023-35340
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A vulnerability in the Windows CNG Key Isolation Service allows for privilege escalation. An attacker can exploit this flaw to gain elevated privileges on the system.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to system resources, posing a significant security risk to the organization.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in Windows CNG Key Isolation Service
See all- CVE-2023-28229HighActively exploited
A vulnerability in the Windows CNG Key Isolation Service allows elevation of privilege. The flaw enables a local attacker to gain higher privileges on the system.
- CVE-2022-41125HighActively exploited
Elevation of privilege vulnerability in Windows CNG Key Isolation Service. An attacker could exploit it to gain elevated privileges.
Original NVD description (English source)
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability