Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Antonio Cocomazzi

Researcher fromSentinel One
#38595of 60,403
7.8Total CVSS
Vulnerabilities · 1
PT-2023-1605
2023-01-10
7.8
CVE-2023-21746
Microsoft
Windows
The issue is related to the implementation of the NT LAN Manager (NTLM) protocol in Windows operating systems, which is associated with insufficient access restrictions. Exploitation of this issue may allow an attacker to bypass security restrictions and elevate their privileges. The vulnerability allows for arbitrary file read/write and elevation of privilege. It is a type of NTLM reflection attack that targets local authentication.