CVE-2023-21264
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Aug 14, 2023
Updated: Aug 24, 2023
CWE ID 119
Summary
CVE-2023-21264 is a vulnerability affecting multiple functions in mem_protect.c. This issue arises due to a misplaced memory access check, allowing an attacker to potentially access hypervisor memory. Consequences of this vulnerability include local privilege escalation with System execution privileges, which can be exploited without user interaction.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share