CVE-2023-32055

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Active Template Library Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.4645
MicrosoftWindows 10 Version 1809>= 10.0.0, < 10.0.17763.4645
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.4645
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.4645
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.1850
MicrosoftWindows 11 version 21H2>= 10.0.0, < 10.0.22000.2176
MicrosoftWindows 10 Version 21H2>= 10.0.19043.0, < 10.0.19044.3208
MicrosoftWindows 11 version 22H2>= 10.0.22621.0, < 10.0.22621.1992
MicrosoftWindows 10 Version 22H2>= 10.0.19045.0, < 10.0.19045.3208
MicrosoftWindows 10 Version 1507>= 10.0.10240.0, < 10.0.10240.20048
MicrosoftWindows 10 Version 1607>= 10.0.14393.0, < 10.0.14393.6085
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.6085
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.6085
MicrosoftWindows Server 2008 Service Pack 2>= 6.0.6003.0, < 6.0.6003.22175
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)>= 6.0.6003.0, < 6.0.6003.22175
MicrosoftWindows Server 2008 Service Pack 2>= 6.0.6003.0, < 6.0.6003.22175
MicrosoftWindows Server 2008 R2 Service Pack 1>= 6.1.7601.0, < 6.1.7601.26623
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)>= 6.1.7601.0, < 6.1.7601.26623
MicrosoftWindows Server 2012>= 6.2.9200.0, < 6.2.9200.24374
MicrosoftWindows Server 2012 (Server Core installation)>= 6.2.9200.0, < 6.2.9200.24374
MicrosoftWindows Server 2012 R2>= 6.3.9600.0, < 6.3.9600.21063
MicrosoftWindows Server 2012 R2 (Server Core installation)>= 6.3.9600.0, < 6.3.9600.21063

References

Timeline

Published
Jul 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-320569.8Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityCVE-2023-320579.8Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2023-320587.5Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loopCVE-2023-320597.5Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, internal calls with default arguments CVE-2023-32067.5A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of theCVE-2023-320606.5DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. Starting in the 2.35 branch and prior tCVE-2023-320615.3Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `teCVE-2023-320624.3OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendarCVE-2023-320635.0OroCalendarBundle enables a Calendar feature and related functionality in Oro applications. Back-office users can access information from anCVE-2023-320644.3OroCommerce package with customer portal and non authenticated visitor website base features. Back-office users can access information aboutCVE-2023-320655.8OroCommerce is an open-source Business to Business Commerce application built with flexibility in mind. Detailed Order totals information maCVE-2023-320665.4Time Tracker is an open source time tracking system. The week view plugin in Time Tracker versions 1.22.11.5782 and prior was not escaping t