CVE-2023-29336

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Win32k Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
May 9, 2023
Last modified
Jun 17, 2026
Added to CISA KEV
May 9, 2023
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-293377.1NuGet Client Remote Code Execution VulnerabilityCVE-2023-293386.6Visual Studio Code Spoofing VulnerabilityCVE-2023-29348.8Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruptionCVE-2023-293407.8AV1 Video Extension Remote Code Execution VulnerabilityCVE-2023-293417.8AV1 Video Extension Remote Code Execution VulnerabilityCVE-2023-293437.8SysInternals Sysmon for Windows Elevation of Privilege VulnerabilityCVE-2023-293447.8Microsoft Office Remote Code Execution VulnerabilityCVE-2023-293456.1Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2023-293467.8NTFS Elevation of Privilege VulnerabilityCVE-2023-293476.8Windows Admin Center Spoofing VulnerabilityCVE-2023-293487.5Windows Remote Desktop Gateway (RD Gateway) Information Disclosure VulnerabilityCVE-2023-293497.8Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
CVE-2023-29336: High severity, CVSS 7.8 | Vulnix