CVE-2023-36407HighCVSS 7.8
Windows Hyper-V Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
🎯 Affected products9
- Windows 11 Version 22H2 for ARM64-based Systems
- Windows 11 Version 22H2 for x64-based Systems
- Windows 11 Version 23H2 for ARM64-based Systems
- Windows 11 Version 23H2 for x64-based Systems
- Windows 11 version 21H2 for ARM64-based Systems
- Windows 11 version 21H2 for x64-based Systems
- Windows Server 2022
- Windows Server 2022 (Server Core installation)
- Windows Server 2022, 23H2 Edition (Server Core installation)
✅ Remediation
KB5032198 (Security Update) — fixed build 10.0.20348.2113 KB5032304 (SecurityHotpatchUpdate) — fixed build 10.0.20348.2091 KB5032192 (Security Update) — fixed build 10.0.22000.2600 KB5032190 (Security Update) — fixed build 10.0.22621.2715 KB5032190 (Security Update) — fixed build 10.0.22631.2715 KB5032202 (Security Update) — fixed build 10.0.25398.531
🔗 References (11)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36407
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032198
- referencehttps://support.microsoft.com/help/5032198
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032304
- referencehttps://support.microsoft.com/help/5032304
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032192
- referencehttps://support.microsoft.com/help/5032192
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032190
- referencehttps://support.microsoft.com/help/5032190
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032202
- referencehttps://support.microsoft.com/help/5032202