CVE-2023-36033 Analizi
Windows DWM Core Library yetki yukseltme acigi. Kasim 2023 Patch Tuesday ile kapatilmistir. DanaBot enfeksiyonlarinin sonrasinda SYSTEM seviyesine yukselme icin kullanilmistir.
CVE-2023-36033
Windows DWM Core Library privilege escalation vulnerability. This vulnerability, which was exploited as 0-day, was also seen in DanaBot campaigns affiliated with LazarusGroup; It was used to obtain SYSTEM rights.
Vulnerability Profile
CVSS Score
7.8 / 10.0
Severity
High
Exploitation Status
⚠ Active Exploitation
Patch Status
✓ Patch Available
Affected Software
Windows 10/11, Windows Server 2019/2022
Exploitation Method
Privilege Escalation
MITRE ATT&CK
T1068 - Exploitation for Privilege Escalation