CVE-2023-36731: Win32k Elevation of Privilege Vulnerability
Published Oct 10, 2023
·Updated
Win32k Elevation of Privilege Vulnerability
Affected Software
49 affected componentsFixes available
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Windows Server 2012
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows 11=22H2
Microsoft Windows 11=22H2
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows 10 1507<10.0.10240.20232
Microsoft Windows 10 1507<10.0.10240.20232
Microsoft Windows 10 1607<10.0.14393.6351
Microsoft Windows 10 1607<10.0.14393.6351
Microsoft Windows 10 1809<10.0.17763.4974
Microsoft Windows 10 21h2<10.0.19041.3570
Microsoft Windows 10 22h2<10.0.19045.3570
Microsoft Windows 11 21h2<10.0.22000.2538
Microsoft Windows 11 22h2<10.0.22621.2428
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2008=r2-sp2
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=1607
Microsoft Windows 10=1607
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10
Microsoft Windows 10
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008 R2
Remediation
Event History
Oct 10, 2023
CVE Published
07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:07 PM
Data Sourced
via MITRE·05:07 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-36731?
CVE-2023-36731 has a critical severity rating due to its potential to allow an attacker to elevate privileges.
2
How do I fix CVE-2023-36731?
To mitigate CVE-2023-36731, users should apply the latest security updates released by Microsoft for their affected Windows versions.
3
Which products are affected by CVE-2023-36731?
CVE-2023-36731 affects multiple versions of Microsoft Windows, including Windows 10, Windows 11, and Windows Server 2016 and later.
4
Can CVE-2023-36731 lead to a full system compromise?
Yes, successful exploitation of CVE-2023-36731 can lead to a full system compromise by escalating privileges.
5
When was CVE-2023-36731 disclosed?
CVE-2023-36731 was disclosed in October 2023 as part of a regular security update.