Exploit for #VU71002 Permissions, Privileges, and Access Controls in Windows Server and Windows

Vulnerability identifier: #VU71002

Vulnerability risk: Low

CVSSv4.0: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Clear]

CVE-ID: CVE-2023-21768

CWE-ID: CWE-264

Exploitation vector: Local

Exploits in database: 9

• June 13, 2025
  • Windows_AFD_LPE_CVE-2023-21768 (Windows 11 System Permission Elevation) [Github]
• January 10, 2025
  • CVE-2023-21768 (Exploit implementation with IO Rings for CVE-2023-21768) [Github]
• May 23, 2024
  • CVE-2023-21768-dotnet (C# / .NET version of CVE-2023-21768) [Github]
• March 22, 2024
  • CVE-2023-21768 (Windows_AFD_LPE_CVE-2023-21768) [Github]
• April 22, 2023
  • CVE-2023-21768-AFD-for-WinSock-EoP-exploit () [Github]
• March 30, 2023
  • Ancillary Function Driver (AFD) for WinSock Elevation of Privilege [Metasploit]
• March 11, 2023
  • nullmap (Using CVE-2023-21768 to manual map kernel mode driver ) [Github]
• March 8, 2023
  • Windows_LPE_AFD_CVE-2023-21768 (LPE exploit for CVE-2023-21768) [Github]
  • Windows_LPE_AFD_CVE-2023-21768 (LPE exploit for CVE-2023-21768) [Github]

Vulnerable software:
Windows Server
Operating systems & Components / Operating system
Windows
Operating systems & Components / Operating system

Vendor: Microsoft