CVE-2023-21823
KEVMicrosoft Windows Graphic Component Privilege Escalation Vulnerability
Description
Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation.
Windows Graphics Component Remote Code Execution Vulnerability
CVSS 3.1 vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPublishedFeb 14, 2023
Last modifiedAug 19, 2026
Added to KEVFeb 14, 2023
Remediation dueMar 7, 2023
References
- msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21823PatchVendor Advisory
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21823US Government Resource
0 recent articles mention this CVE
70
Risk assessment · High
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1329 days
- CVSS
- 7.8 HIGH
- EPSS (30-day exploit probability)
- 5.6% · top 7% of all CVEs
- Weakness
- CWE-190
Recommended actions
- 1.Apply updates per vendor instructions.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.