What the vulnerability does
01Description
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2023-21674
HIGH
CVE-2023-21674: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVSS base score
8.8/10
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
CISA mandated remediation
02CISA Required Action
Apply updates per vendor instructions.
Key dates
03Disclosure timeline
January 10, 2023
CVE published
October 21, 2025
Record updated
External resources
04References
NVD — National Vulnerability Database
https://nvd.nist.gov/vuln/detail/CVE-2023-21674
CWE — Common Weakness Enumeration
https://cwe.mitre.org/data/definitions/416.html
CISA KEV Reference
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CV…
CISA KEV Reference
https://nvd.nist.gov/vuln/detail/CVE-2023-21674
Related vulnerabilities
