PULSEUnderground Intel

LIVE63signals / 24h

FEED

ransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilitiesransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilities

CVE Watch—

CVE-2023-21674

Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

41.0%

p99

KEV

YES

Jan 10, 2023

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d

41.0%EPSS · 30 days41.8%

2026-09-172026-10-15

KEV catalog record

Product

Microsoft / Windows

Vulnerability

Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

Added to KEV

Jan 10, 2023

Remediate by

Jan 31, 2023

Known ransomware use

No

Summary description

Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply updates per vendor instructions.

Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21674; https://nvd.nist.gov/vuln/detail/CVE-2023-21674

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-969518.8 HIG

KEV—72Microsoft Windows Command Injection Vulnerability10h CVE-2026-858807.8 HIG

KEV—77Microsoft Windows Heap-Based Buffer Overflow Vulnerability22d CVE-2026-819637.8 HIG

KEV—60Microsoft Windows Link Following Vulnerability37d CVE-2026-322024.3 MED

KEV—78Microsoft Windows Protection Mechanism Failure Vulnerability63d CVE-2026-208055.5 MED

KEV—78Microsoft Windows Information Disclosure Vulnerability78d CVE-2025-622217.8 HIG

KEV—75Microsoft Windows Use After Free Vulnerability21d