Micropatching the "LocalPotato" NTLM Elevation of Privilege (CVE-2023-21746)

January 2023 Windows Updates brought a fix for a local privilege escalation vulnerability in Windows, called "LocalPotato" by its discoverers  Andrea Pierini and Antonio Cocomazzi. Its name is in reference to many other "potato" vulnerabilities that have been discovered in Windows since 2014 when James Forshaw of Google Project Zero published their analysis of Local WebDAV NTLM Reflection.

The potato vulnerability at hand, "LocalPotato", was reported to Microsoft by Andrea and Antonio and will, now that the official …

cve distributed esu january microsoft ntlm patch privilege server updates windows windows 10 windows 7 windows server windows server 2008 windows updates