CVE-2023-21264

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Aug 14, 2023
Updated: Aug 24, 2023
CWE ID 119

Summary

CVE-2023-21264 is a vulnerability affecting multiple functions in mem_protect.c. This issue arises due to a misplaced memory access check, allowing an attacker to potentially access hypervisor memory. Consequences of this vulnerability include local privilege escalation with System execution privileges, which can be exploited without user interaction.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share