CVE-2023-32046 — Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability
CVE-2023-32046: Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Microsoft |
| Product | Windows |
| Date added | 2023-07-11 |
| Due date | 2023-08-01 |
| Ransomware campaign use | Unknown |
Description
Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.
Required action (CISA)
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Notes
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-32046; https://nvd.nist.gov/vuln/detail/CVE-2023-32046
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-32046
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog