Security researchers have discovered and published details about vulnerabilities that are being actively exploited. microsoft A security flaw in Windows could allow an attacker to gain elevated privileges on an affected system.
tracked CVE-2023-29336 With a CVSS severity of 7.8, this vulnerability is related to a privilege escalation bug in the Win32k component of Windows. A patch for this flaw was released by Microsoft as part of the May 2023 Patch Tuesday Update.
Read more about the latest patch Tuesday: Microsoft patches 3 zero-day bugs this month
While the exact details of the actual exploit remain unknown, cybersecurity firm Numen Cyber has broken down the patch released by Microsoft, Proof of concept (PoC) exploit For Windows Server 2016.
among them Recommendation, Numen Cyber emphasized that Win32k has a history of vulnerabilities. Microsoft is attempting to refactor this part of the kernel code using Rust in the latest Windows 11 preview versions, which may eliminate such vulnerabilities in the future.
This vulnerability allows a low-privileged user to gain SYSTEM privileges, the highest user mode privilege in Windows.Cybersecurity firm Avast ranked first find flawsrevealed that it was actively exploited as a zero-day in attacks.
Numen Cyber warned earlier this week that exploiting this vulnerability does not require new techniques and relies heavily on leaked desktop heap handle addresses. Therefore, older systems are still at risk if this issue is not thoroughly addressed.
“While this vulnerability appears to be unexploitable on Win11 system versions, it poses a significant risk to older systems,” the technical document reads.
System administrators are advised to be aware of reading and writing at unusual offsets in memory or relative to window objects. This may indicate his active exploitation of CVE-2023-29336 for local privilege escalation.
An additional vulnerability was recently discovered that could allow an attacker to gain elevated privileges. Popular graphics debugger RenderDoc.
Image credit: diy13 / Shutterstock.com
