CVE-2023-28229

Produto

Microsoft / Windows CNG Key Isolation Service

Vulnerabilidade

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Adicionado ao KEV

4 de out. de 2023

Corrigir até

25 de out. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229; https://nvd.nist.gov/vuln/detail/CVE-2023-28229