What the vulnerability does
01Description
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2023-21823
HIGH
CVE-2023-21823: Windows Graphics Component Remote Code Execution Vulnerability
CVSS base score
7.8/10
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C
CISA mandated remediation
02CISA Required Action
Apply updates per vendor instructions.
Key dates
03Disclosure timeline
February 14, 2023
CVE published
October 21, 2025
Record updated
External resources
04References
NVD — National Vulnerability Database
https://nvd.nist.gov/vuln/detail/CVE-2023-21823
CWE — Common Weakness Enumeration
https://cwe.mitre.org/data/definitions/190.html
CISA KEV Reference
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CV…
CISA KEV Reference
https://nvd.nist.gov/vuln/detail/CVE-2023-21823
