CVE-2023-36047: Windows Authentication Elevation of Privilege Vulnerability
Published Nov 14, 2023
·Updated
Windows Authentication Elevation of Privilege Vulnerability
Affected Software
37 affected componentsFixes available
Microsoft Windows Server 2022, 23H2 Edition
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows 11=23H2
Microsoft Windows 11=22H2
Microsoft Windows 11=22H2
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows 11=23H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows 10 1809<10.0.17763.5122
Microsoft Windows 10 1809<10.0.17763.5122
Microsoft Windows 10 1809<10.0.17763.5122
Microsoft Windows 10 21h2<10.0.19041.3693
Microsoft Windows 10 21h2<10.0.19041.3693
Microsoft Windows 10 21h2<10.0.19041.3693
Microsoft Windows 10 22h2<10.0.19045.3693
Microsoft Windows 10 22h2<10.0.19045.3693
Microsoft Windows 10 22h2<10.0.19045.3693
Microsoft Windows 11 21h2<10.0.22000.2600
Microsoft Windows 11 21h2<10.0.22000.2600
Microsoft Windows 11 22h2<10.0.22621.2715
Microsoft Windows 11 22h2<10.0.22621.2715
Microsoft Windows 11 23h2<10.0.22621.2715
Microsoft Windows 11 23h2<10.0.22621.2715
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Remediation
Event History
Nov 14, 2023
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:57 PM
Data Sourced
via MITRE·05:57 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-36047?
CVE-2023-36047 is a Windows Authentication Elevation of Privilege Vulnerability.
2
How severe is CVE-2023-36047?
CVE-2023-36047 has a severity rating of 7.8 (High).
3
Which versions of Windows are affected by CVE-2023-36047?
Windows 10 versions 21H2, 22H2, and 1809, Windows 11 versions 23H2, 22H2, and 21H2, Windows Server 2019, Windows Server 2022, and Windows Server 2022, 23H2 Edition (Server Core Installation) are affected by CVE-2023-36047.
4
How can I fix CVE-2023-36047?
To fix CVE-2023-36047, apply the appropriate patches provided by Microsoft.
5
Where can I find more information about CVE-2023-36047?
You can find more information about CVE-2023-36047 on the Microsoft Security Response Center website.