CVE-2023-36889
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
A vulnerability in the Windows Group Policy security feature allows for security mechanism bypass. This could lead to unauthorized access to system resources.
Risk Assessment
Organizations may be exposed to attacks that exploit this vulnerability to gain unauthorized access, potentially leading to serious security breaches.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability and review group policies to strengthen security.
Other vulnerabilities in Windows Group Policy
See all- CVE-2026-69717High
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
- CVE-2026-50391High
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
- CVE-2022-41086Medium
Windows Group Policy Elevation of Privilege Vulnerability.
- CVE-2022-37992High
A vulnerability in Windows Group Policy allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Windows Group Policy Security Feature Bypass Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS