CVE-2023-29359
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2023-29359 is an elevation of privilege vulnerability affecting the Graphics Device Interface (GDI) subsystem in Microsoft Windows. An attacker who successfully exploits this vulnerability can gain administrative privileges on an affected system, potentially leading to unauthorized access or data theft. The vulnerability arises due to a flaw in the way GDI handles object destruction, allowing an attacker to execute arbitrary code with elevated privileges. Mitigations include applying the latest Microsoft security updates and practicing strong security hygiene, such as using firewalls, antivirus software, and secure user accounts.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions