CVE-2023-21800: Windows Installer Elevation of Privilege Vulnerability
Published Feb 14, 2023
·Updated
Windows Installer Elevation of Privilege Vulnerability
Affected Software
8 affected componentsFixes available
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2008 R2<6.1.7601.26366
6.1.7601.26366
Microsoft Windows Server 2008 R2<6.1.7601.26366
6.1.7601.26366
Microsoft Windows Server 2008<6.0.6003.21915
6.0.6003.21915
Microsoft Windows Server 2008<6.0.6003.21915
6.0.6003.21915
Microsoft Windows Server 2008<6.0.6003.21915
6.0.6003.21915
Microsoft Windows Server 2008<6.0.6003.21915
6.0.6003.21915
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.26366Patch KB5022874 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.21915Patch KB5022893
Event History
Feb 14, 2023
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:00 AM
Affected Software
Updated
via Microsoft·08:00 AM
Description
CVE Published
via MITRE·07:33 PM
Data Sourced
via MITRE·07:33 PM
DescriptionSeverity
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-21800?
CVE-2023-21800 is classified as an Elevation of Privilege vulnerability.
2
How do I fix CVE-2023-21800?
To fix CVE-2023-21800, install the latest security updates provided by Microsoft.
3
Which versions of Windows are affected by CVE-2023-21800?
CVE-2023-21800 affects various versions of Windows Server, including Windows Server 2008 and Windows Server 2008 R2.
4
Is CVE-2023-21800 exploitable remotely?
CVE-2023-21800 can potentially be exploited locally to gain elevated privileges.
5
What component is involved in CVE-2023-21800?
CVE-2023-21800 involves the Windows Installer component of the Microsoft Windows operating system.