{"advisories":[{"id":"EUVD-2023-25841","source":"euvd","title":"Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-25841"}],"cve":"CVE-2023-21674","epss":{"score":0.40987},"kev":{"dateAdded":"2023-01-10T00:00:00+00:00","dueDate":"2023-01-31T00:00:00+00:00"},"mitre":{"cpes":["cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*"],"created":"2023-01-10T00:00:00+00:00","description":"Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C"},"cvssV4_0":{}},"mitre_repo_path":"cves/2023/21xxx/CVE-2023-21674.json","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21674"],"title":"Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability","updated":"2025-10-21T23:15:28.774000+00:00","vendors":["microsoft","microsoft$PRODUCT$windows_10_1507","microsoft$PRODUCT$windows_10_1607","microsoft$PRODUCT$windows_10_1809","microsoft$PRODUCT$windows_10_20H2","microsoft$PRODUCT$windows_10_21H2","microsoft$PRODUCT$windows_10_22H2","microsoft$PRODUCT$windows_11_21H2","microsoft$PRODUCT$windows_11_22H2","microsoft$PRODUCT$windows_8.1","microsoft$PRODUCT$windows_server_2012_R2","microsoft$PRODUCT$windows_server_2016","microsoft$PRODUCT$windows_server_2019","microsoft$PRODUCT$windows_server_2022"],"weaknesses":["CWE-416"]},"nvd":{"cpes":["cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*"],"created":"2023-01-10T22:15:16.307000+00:00","description":"Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2023/CVE-2023-21674.json","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21674","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21674"],"title":null,"updated":"2026-06-17T05:33:36.547000+00:00","vendors":["microsoft","microsoft$PRODUCT$windows_10_1507","microsoft$PRODUCT$windows_10_1607","microsoft$PRODUCT$windows_10_1809","microsoft$PRODUCT$windows_10_20h2","microsoft$PRODUCT$windows_10_21h2","microsoft$PRODUCT$windows_10_22h2","microsoft$PRODUCT$windows_11_21h2","microsoft$PRODUCT$windows_11_22h2","microsoft$PRODUCT$windows_rt_8.1","microsoft$PRODUCT$windows_server_2012","microsoft$PRODUCT$windows_server_2016","microsoft$PRODUCT$windows_server_2019","microsoft$PRODUCT$windows_server_2022"],"weaknesses":["CWE-416"]},"opencve":{"changes":[{"created":"2025-01-01T00:45:00+00:00","data":[{"details":{"added":[],"removed":["cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.19685:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.19685:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.5648:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.5648:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.3887:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.3887:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.3887:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.2486:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.2486:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.2486:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.2486:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.2486:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.2486:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.2486:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.2486:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.1455:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.1455:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.1105:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.1105:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20778:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20778:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_rt_8.1:6.3.9600.20778:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20778:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5648:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.3887:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.1487:*:*:*:*:*:*:*"]},"type":"cpes"},{"details":{"added":[],"removed":["microsoft$PRODUCT$windows_10_20H2","microsoft$PRODUCT$windows_10_21H2","microsoft$PRODUCT$windows_10_22H2","microsoft$PRODUCT$windows_11_21H2","microsoft$PRODUCT$windows_11_22H2","microsoft$PRODUCT$windows_8.1","microsoft$PRODUCT$windows_server_2012_R2"]},"type":"vendors"}],"id":"7b9a0027-331d-49f6-9485-d4d921182944"},{"created":"2025-01-01T01:15:00+00:00","data":[{"details":{"added":{"kev":{"dateAdded":"2023-01-10"},"ssvc":{"options":{"Automatable":"no","Exploitation":"active","Technical Impact":"total"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"d46181d4-efd4-45b9-a408-2c90fd7da845"},{"created":"2025-10-21T19:30:00+00:00","data":[{"details":{"added":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21674"],"removed":[]},"type":"references"}],"id":"b05212fb-9094-484f-8f19-8b9525edb1b4"},{"created":"2025-10-21T20:30:00+00:00","data":[{"details":{"added":[],"removed":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21674"]},"type":"references"}],"id":"8ff1a4f8-a396-49d3-89d5-b1fc6b1698e5"},{"created":"2025-10-21T23:15:00+00:00","data":[{"details":{"added":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21674"],"removed":[]},"type":"references"}],"id":"8931cda1-4b11-47cd-b4e8-90e2ebb84fd3"},{"created":"2026-02-25T16:45:00+00:00","data":[{"details":["microsoft$PRODUCT$windows_10_20H2","microsoft$PRODUCT$windows_10_21H2","microsoft$PRODUCT$windows_10_22H2","microsoft$PRODUCT$windows_11_21H2","microsoft$PRODUCT$windows_11_22H2","microsoft$PRODUCT$windows_8.1","microsoft$PRODUCT$windows_server_2012_R2"],"type":"first_time"},{"details":{"added":["cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"],"removed":[]},"type":"cpes"},{"details":{"added":["microsoft$PRODUCT$windows_10_20H2","microsoft$PRODUCT$windows_10_21H2","microsoft$PRODUCT$windows_10_22H2","microsoft$PRODUCT$windows_11_21H2","microsoft$PRODUCT$windows_11_22H2","microsoft$PRODUCT$windows_8.1","microsoft$PRODUCT$windows_server_2012_R2"],"removed":[]},"type":"vendors"}],"id":"2cf9db88-d007-41e0-8aab-d23a848662f4"}],"cpes":{"data":["cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*"],"providers":["mitre","nvd"]},"created":{"data":"2023-01-10T00:00:00+00:00","provider":"mitre"},"description":{"data":"Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.40987},"provider":"first"},"kev":{"data":{"dateAdded":"2023-01-10T00:00:00+00:00","dueDate":"2023-01-31T00:00:00+00:00"},"provider":"cisa"},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"active","Technical Impact":"total"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21674","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21674"],"providers":["mitre","nvd","vulnrichment"]},"title":{"data":"Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability","provider":"mitre"},"updated":{"data":"2025-10-30T19:16:50.850000+00:00","provider":"nvd"},"vendors":{"data":["microsoft","microsoft$PRODUCT$windows_10_1507","microsoft$PRODUCT$windows_10_1607","microsoft$PRODUCT$windows_10_1809","microsoft$PRODUCT$windows_10_20H2","microsoft$PRODUCT$windows_10_20h2","microsoft$PRODUCT$windows_10_21H2","microsoft$PRODUCT$windows_10_21h2","microsoft$PRODUCT$windows_10_22H2","microsoft$PRODUCT$windows_10_22h2","microsoft$PRODUCT$windows_11_21H2","microsoft$PRODUCT$windows_11_21h2","microsoft$PRODUCT$windows_11_22H2","microsoft$PRODUCT$windows_11_22h2","microsoft$PRODUCT$windows_8.1","microsoft$PRODUCT$windows_rt_8.1","microsoft$PRODUCT$windows_server_2012","microsoft$PRODUCT$windows_server_2012_R2","microsoft$PRODUCT$windows_server_2016","microsoft$PRODUCT$windows_server_2019","microsoft$PRODUCT$windows_server_2022"],"providers":["mitre","nvd"]},"weaknesses":{"data":["CWE-416"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2023-01-10T00:00:00+00:00","description":"Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{"dateAdded":"2023-01-10"},"ssvc":{"options":{"Automatable":"no","Exploitation":"active","Technical Impact":"total"},"version":"2.0.3"}},"references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21674"],"title":"Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability","updated":"2024-05-29T14:35:00.886000+00:00","vendors":[],"vulnrichment_repo_path":"2023/21xxx/CVE-2023-21674.json","weaknesses":[]}}