CVE-2023-24902 is a Win32k Elevation of Privilege vulnerability affecting Microsoft Windows 11 versions 21H2 and 22H2. With a CVSS score of 7.8 (HIGH), it allows a local attacker with low privileges to achieve high impact on confidentiality, integrity, and availability without user interaction. While not actively exploited in the wild (KEV: No), there is no public exploit code available, and it has received limited community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 10.0.22000.1936CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:* | ||
< 10.0.22000.1702CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.