coldbraid

CVE-2023-28229 Microsoft Windows CNG Key Isolation Service

Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.

CVSS
not scored

CWE-591

On CISA’s exploited list

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Added
2023-10-04
Federal patch deadline
2023-10-25
Ransomware use
not known