CVE-2023-47172

Vulnerability

WithSecure Client Security 15, Server Security 15, Email and Server Security 15, and Elements Endpoint Protection 17 and later for Microsoft Windows contain a vulnerability that allows a local user with administrator privileges to corrupt kernel memory, leading to potential local privilege escalation [1].

Exploitation

An attacker must have local access and administrator privileges on the affected system. The exploitation involves corrupting kernel memory, which may be achieved through manipulation of the affected component. No known exploits have been publicly disclosed as of the advisory publication [1].

Impact

Successful exploitation allows the attacker to escalate privileges from an administrative account to a higher level, potentially achieving SYSTEM or kernel-level access. This could lead to full compromise of the affected system [1].

Mitigation

As of the advisory date, WithSecure has not released a fix. The advisory page is being updated as additional information becomes available. Users should monitor the advisory for updates [1].