Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Microsoft · Windows CNG Key Isolation Service
Date added (CISA)
2023-10-04
Remediation due
2023-10-25
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.