← back
CVE-2023-21823

Windows Graphics Component Remote Code Execution Vulnerability

CVSS 7.8 HIGHEPSS 5.6%● KEVCWE-190
In short

A flaw in Windows Graphics Component allows attackers to run malicious code on a computer by exploiting an integer overflow vulnerability. This is dangerous because it can give attackers full control over your system without needing special permissions.

Technical detail

Integer overflow in Windows Graphics Component allows remote code execution through crafted input to graphics processing functions. Exploitation requires user interaction (opening a malicious file or visiting a compromised webpage) but results in code execution with the privileges of the affected process, potentially leading to system compromise.

Summary generated and translated by AI from the official description.
Windows Graphics Component Remote Code Execution Vulnerability
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →