What is CVE-2023-36743?

CVE-2023-36743 is a high-severity elevation of privilege vulnerability in Microsoft Windows operating systems, including Windows 10, Windows 11, and Windows Server editions. If exploited, an attacker could gain SYSTEM privileges, posing a significant risk. Users should apply necessary security updates to protect their systems.

Who is impacted by CVE-2023-36743?

CVE-2023-36743 affects users of Microsoft Windows 10, Windows 11, and Windows Server editions, including 32-bit, 64-bit, ARM64-based systems, and Server Core installations. Impacted versions range from Windows 10 1507 to Windows 11 22H2, and Windows Server 2008 R2 SP1 to Windows Server 2022. Users should stay informed and apply updates to mitigate potential threats.

What to do if CVE-2023-36743 affected you

If you're affected by the CVE-2023-36743 vulnerability, it's important to take action to protect your system. Follow these simple steps:

1. Apply the security updates provided by Microsoft for your specific Windows operating system or server version.

2. Keep your system updated with the latest security patches from Microsoft.

3. Monitor the Microsoft Security Update Guide for new information or updates related to this vulnerability.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-36743 vulnerability, also known as the Win32k Elevation of Privilege Vulnerability, is not listed in CISA's Known Exploited Vulnerabilities Catalog. It was published on October 10, 2023. There is no specific due date mentioned for addressing this vulnerability, but users should apply the security updates provided by Microsoft to protect their systems.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-416, which is a Use After Free issue affecting Windows operating systems.

Learn More

For more information about the CVE-2023-36743 vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or links below.

• NVD - CVE-2023-36743

• Microsoft - Win32k Elevation of Privilege Vulnerability

• CVE Record | CVE