CVEvulnerability

CVE-2023-28229

7.0 HIGH Known exploited Published 2023-04-11 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability — Microsoft Windows CNG Key Isolation Service

Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.

Added to KEV: 2023-10-04
Remediation due: 2023-10-25
Ransomware use: Unknown
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229; https://nvd.nist.gov/vuln/detail/CVE-2023-28229

Status: Analyzed
Published: 2023-04-11
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-591

Description

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Affected configurations

• microsoft windows 10 1507 (< 10.0.10240.19869) • microsoft windows 10 1607 (< 10.0.14393.5850) • microsoft windows 10 1809 (< 10.0.17763.4252) • microsoft windows 10 20h2 (< 10.0.19042.2846) • microsoft windows 10 21h2 (< 10.0.19044.2846) • microsoft windows 10 22h2 (< 10.0.19045.2846) • microsoft windows 11 21h2 (< 10.0.22000.1817) • microsoft windows 11 22h2 (< 10.0.22621.1555) • microsoft windows server 2008 • microsoft windows server 2008 r2 • microsoft windows server 2012 • microsoft windows server 2012 r2 • microsoft windows server 2016 • microsoft windows server 2019 • microsoft windows server 2022

Weakness · CWE (1)

CWE-591 Sensitive Data Storage in Improperly Locked Memory weakness

References