1. Home
  2. Vulnerabilities
  3. CVE-2023-28225

CVE-2023-28225

CVSS v3.1 7.8 (High)
78% Progress
EPSS 0.04 % (11th)
0.04% Progress
Affected Products 11
Advisories 1
NVD Status Modified
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software Tools, Exploits & PoC Graph Web & Social Timeline

Windows NTLM Elevation of Privilege Vulnerability

Weaknesses
CWE-122
Heap-based Buffer Overflow
CWE-NVD-noinfo
CVE Status
PUBLISHED
NVD Status
Modified
CNA
Microsoft Corporation
Published Date
2023-04-11 21:15:23
(17 months ago)
Updated Date
2024-05-29 02:15:27
(3 months ago)

Affected Products

Microsoft

Configuration #1

    CPE23 From Up To
  Microsoft Windows 10 1507 prior 10.0.10240.19869 version cpe:2.3:o:microsoft:windows_10_1507 < 10.0.10240.19869
  Microsoft Windows 10 1607 prior 10.0.14393.5850 version cpe:2.3:o:microsoft:windows_10_1607 < 10.0.14393.5850
  Microsoft Windows 10 1809 prior 10.0.17763.4252 version cpe:2.3:o:microsoft:windows_10_1809 < 10.0.17763.4252
  Microsoft Windows 10 20h2 prior 10.0.19042.2846 version cpe:2.3:o:microsoft:windows_10_20h2 < 10.0.19042.2846
  Microsoft Windows 10 21h2 prior 10.0.19044.2846 version cpe:2.3:o:microsoft:windows_10_21h2 < 10.0.19044.2846
  Microsoft Windows 10 22h2 prior 10.0.19045.2846 version cpe:2.3:o:microsoft:windows_10_22h2 < 10.0.19045.2846
  Microsoft Windows 11 21h2 prior 10.0.22000.1817 version cpe:2.3:o:microsoft:windows_11_21h2 < 10.0.22000.1817
  Microsoft Windows 11 22h2 prior 10.0.22621.1555 version cpe:2.3:o:microsoft:windows_11_22h2 < 10.0.22621.1555
  Microsoft Windows Server 2016 cpe:2.3:o:microsoft:windows_server_2016:-
  Microsoft Windows Server 2019 cpe:2.3:o:microsoft:windows_server_2019:-
  Microsoft Windows Server 2022 cpe:2.3:o:microsoft:windows_server_2022:-