CVE-2023-24914

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Win32k Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
MicrosoftWindows 11 version 22H2>= 10.0.22621.0, < 10.0.22621.1555

References

Timeline

Published
Apr 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-249195.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-24927.2The QueryWall: Plug'n Play Firewall WordPress plugin through 1.1.1 does not properly sanitise and escape a parameter before using it in a SQCVE-2023-249205.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-249215.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-249226.5Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityCVE-2023-249235.5Microsoft OneDrive for Android Information Disclosure VulnerabilityCVE-2023-249248.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-249258.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-249268.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-249278.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-249288.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-249298.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24914: High severity, CVSS 7.0 | Vulnix