Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2023-23388

Published: 14/03/2023 Updated: 29/05/2024
CVSS v3 Base Score: 8.8 | Impact Score: 6 | Exploitability Score: 2
VMScore: 0

Vulnerability Summary

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows server 2016 -

microsoft windows server 2019 -

microsoft windows server 2022 -

microsoft windows 11 22h2

microsoft windows 10 22h2

microsoft windows 10 1607

microsoft windows 10 21h2

microsoft windows 11 21h2

microsoft windows 10 20h2

microsoft windows 10 1809

microsoft windows 10 1507

Github Repositories

https://github.com/ynwarcs/CVE-2023-23388

poc for CVE-2023-23388 (LPE in Windows 10/11 bthserv service)

This repository contains a poc for CVE-2023-23388, which is described in this series, particularly in this post It's an LPE in the bluetooth service (aka bthserv) in Windows 10/11 that allows an unprivileged user to escalate to LOCAL SERVICE This repo doesn't contain an exploit, only a poc building, running, etc Use a VM This could be a virus MS fixed the vulner

References

NVD-CWE-noinfohttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23388https://nvd.nist.govhttps://github.com/ynwarcs/CVE-2023-23388
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-6267XML injectionCVE-2024-37673CVE-2024-6266CVE-2024-30078arbitrary CVE-2024-36886CVE-2024-5346template injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook