Microsoft Patch Tuesday Fixed Zero Day Elevation of Privilege Vulnerability (CVE-2023-21674)

Microsoft has released 98 security patches for this month's January 2023 Patch Tuesday release. One of the fixes is for CVE-2023-21674 (Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability). The vulnerability is rated critical, and exploitation of the vulnerability was observed in the field by Microsoft. This has a CVSS score of 8.8.Why is this Significant?This is significant because Microsoft observed CVE-2023-21674 being exploited as a 0-day, as such the patch should be applied as soon as possible. …

advanced alpc call critical cve cve-2023-21674 cvss exploitation exploited fixes january local microsoft microsoft patch tuesday patch patches patch tuesday privilege procedure release score security tuesday vulnerability windows