CVE-2023-23376

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Aug 19, 2026

Description

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Feb 14, 2023
Last modified
Aug 19, 2026
Added to CISA KEV
Feb 14, 2023
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-233777.83D Builder Remote Code Execution VulnerabilityCVE-2023-233787.8Print 3D Remote Code Execution VulnerabilityCVE-2023-233797.8Microsoft Defender for IoT Elevation of Privilege VulnerabilityCVE-2023-23388.8SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-233817.8Visual Studio Remote Code Execution VulnerabilityCVE-2023-233826.5Azure Machine Learning Compute Instance Information Disclosure VulnerabilityCVE-2023-233834.7Service Fabric Explorer Spoofing VulnerabilityCVE-2023-233847.3Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2023-233857.0Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege VulnerabilityCVE-2023-233888.8Windows Bluetooth Driver Elevation of Privilege VulnerabilityCVE-2023-233896.3Microsoft Defender Elevation of Privilege VulnerabilityCVE-2023-23395.4Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-23376: High severity, CVSS 7.8 | Vulnix