Lucene search
HistoryOct 10, 2023 - 6:15 p.m.
CVE-2023-41766
cve-2023-41766
windows
client server run-time subsystem
elevation of privilege
vulnerability
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
18.9%
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Affected configurations
Node
microsoftwindows_10_1507Range<10.0.10240.20232
ORmicrosoftwindows_10_1607Range<10.0.14393.6351
ORmicrosoftwindows_10_1809Range<10.0.17763.4974
ORmicrosoftwindows_10_21h2Range<10.0.19041.3570
ORmicrosoftwindows_10_22h2Range<10.0.19045.3570
ORmicrosoftwindows_11_21h2Range<10.0.22000.2538
ORmicrosoftwindows_11_22h2Range<10.0.22621.2428
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_server_2008Matchr2sp1x64
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
ORmicrosoftwindows_server_2016Match-
ORmicrosoftwindows_server_2019Match-
ORmicrosoftwindows_server_2022Match-
Related
cve
cve
CVE-2023-41766
2023-10-10 18:15:18
prion
prion
Privilege escalation
2023-10-10 18:15:00
cvelist
cvelist
mscve
mscve
nessus
nessus
KB5031411: Windows Server 2008 Security Update (October 2023)
2023-10-10 00:00:00
KB5031441: Windows Server 2008 R2 Security Update (October 2023)
2023-10-10 00:00:00
KB5031407: Windows Server 2012 R2 Security Update (October 2023)
2023-10-10 00:00:00
mskb
mskb
October 10, 2023âKB5031411 (Security-only update)
2023-10-10 07:00:00
October 10, 2023âKB5031416 (Monthly Rollup)
2023-10-10 07:00:00
October 10, 2023âKB5031408 (Monthly Rollup)
2023-10-10 07:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5031377)
2023-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5031362)
2023-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5031356)
2023-10-11 00:00:00
kaspersky
kaspersky
KLA61359 Multiple vulnerabilities in Microsoft Products (ESU)
2023-10-10 00:00:00
KLA61358 Multiple vulnerabilities in Microsoft Windows
2023-10-10 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - October 2023
2023-10-10 20:34:57
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
18.9%
Related for NVD:CVE-2023-41766