# CVE-2023-21768

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

- Page: https://www.vulneraibility.com/cve/CVE-2023-21768
- CVSS: 7.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 65.42% (percentile 99.3)
- Public exploit code: 1 Metasploit module · 14 GitHub proofs of concept (first 2023-03-07)
- CISA SSVC: exploitation none, automatable no, technical impact total (assessed 2024-10-08)
- Weakness: CWE-822
- Published: 2023-01-10

## Affected versions

- Microsoft Windows 11 version 21H2: affected >= 10.0.0 and < 10.0.22000.1455
- Microsoft Windows 11 version 22H2: affected >= 10.0.22621.0 and < 10.0.22621.1105
- Microsoft Windows Server 2022: affected >= 10.0.20348.0 and < 10.0.20348.1487

A version outside these ranges is not a statement that it is unaffected.

## References

- [advisory] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21768

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.