Microsoft fixes EoP zero-day on January Patch Tuesday | Computer Weekly
Briefly

Security teams face a busy few days after Microsoft's first monthly Patch Tuesday drop of 2023, which contains fixes for 98 distinct vulnerabilities, 11 of them rated as critical, and one zero-day under active exploitation in the wild, which was uncovered by researchers at Avast.Tracked as CVE-2023-21674, the zero-day is an elevation of privilege (EoP) flaw in Windows Advanced Local Procedure Call (ALPC), which, if successfully exploited, would allow an attacker to gain system privileges.
Read at ComputerWeekly.com
[
add
]
[
|
|
]