{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Microsoft Windows: 2 exploited vulnerabilities (CVE-2023-21823, CVE-2023-23376) · updates",
  "home_page_url": "https://pwn.watch/i/microsoft-windows-cve-2023-21823-23376",
  "feed_url": "https://pwn.watch/i/microsoft-windows-cve-2023-21823-23376/feed.json",
  "description": "Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation. Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. Added to CISA KEV on 2023-02-14. CISA lists known use in ransomware campaigns.",
  "language": "en",
  "_pwn": {
    "slug": "microsoft-windows-cve-2023-21823-23376",
    "severity": "high",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/microsoft-windows-cve-2023-21823-23376/feed.xml",
    "llms": "https://pwn.watch/i/microsoft-windows-cve-2023-21823-23376/llms.txt",
    "json": "https://pwn.watch/i/microsoft-windows-cve-2023-21823-23376.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/microsoft-windows-cve-2023-21823-23376#2023-02-14-bce50ad9",
      "url": "https://pwn.watch/i/microsoft-windows-cve-2023-21823-23376#2023-02-14-bce50ad9",
      "title": "Microsoft Windows: 2 exploited vulnerabilities (CVE-2023-21823, CVE-2023-23376): CISA added CVE-2023-21823 to the KEV catalog (due 2023-03-07).",
      "content_text": "Microsoft Windows: 2 exploited vulnerabilities (CVE-2023-21823, CVE-2023-23376): CISA added CVE-2023-21823 to the KEV catalog (due 2023-03-07).",
      "date_published": "2023-02-14T00:00:00.000Z",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/microsoft-windows-cve-2023-21823-23376#2023-02-14-69964026",
      "url": "https://pwn.watch/i/microsoft-windows-cve-2023-21823-23376#2023-02-14-69964026",
      "title": "Microsoft Windows: 2 exploited vulnerabilities (CVE-2023-21823, CVE-2023-23376): CISA added CVE-2023-23376 to the KEV catalog (due 2023-03-07).",
      "content_text": "Microsoft Windows: 2 exploited vulnerabilities (CVE-2023-21823, CVE-2023-23376): CISA added CVE-2023-23376 to the KEV catalog (due 2023-03-07).",
      "date_published": "2023-02-14T00:00:00.000Z",
      "tags": [
        "high"
      ]
    }
  ]
}