CVE-2023-21674
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
Published Jan 10, 2023 · updated Jun 16, 2026 · microsoft windows 10 1507
Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.
Timeline
Detection, updates, and resolution for this record.
Jan 10, 2023 · Catalog
Detected
Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.
Jan 10, 2023 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jan 31, 2023 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.
Required action
Apply updates per vendor instructions.
CISA due date Jan 31, 2023
Affected
- cpe microsoft/windows 10 1507version unspecified
- cpe microsoft/windows 10 1607version unspecified
- cpe microsoft/windows 10 1809version unspecified
- cpe microsoft/windows 10 20h2version unspecified
- cpe microsoft/windows 10 21h2version unspecified
- cpe microsoft/windows 10 22h2version unspecified
- cpe microsoft/windows 11 21h2version unspecified
- cpe microsoft/windows 11 22h2version unspecified
- vendor Microsoft Windowsversion unspecified
Sources
- CISA KEVCVE-2023-21674
Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.
cisa.gov - CVE.orgCVE-2023-21674
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-21674
30-day exploitation probability 41.0%
first.org - NIST NVDCVE-2023-21674
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd.nist.gov