CVE-2023-21674Vulnerability
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Tenable · last reported
Last reported 1 month ago
CISA KEVAdded 10 Jan 2023
Fix due 31 Jan 2023
Used by ransomware: not knownCISA KEV catalogue
Fix due 31 Jan 2023
Used by ransomware: not knownCISA KEV catalogue
EPSS41.0%
higher than 98% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 98% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)“…s the first to be included in Patch Tuesday in more than three years (April 2023) and the second to be exploited as a zero-day since CVE-2023-21674 as part of the January 2023 Patch Tuesday.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-85880, CVE-2026-81963, CVE-2026-69730, CVE-2026-69676, CVE-2026-69525, CVE-2026-69380, CVE-2026-695147, CVE-2026-695397, CVE-2026-695997, CVE-2026-695367, CVE-2026-695518, CVE-2026-698138, CVE-2026-698588, CVE-2026-775058, CVE-2026-697828, CVE-2026-698278, CVE-2026-699898, CVE-2026-729287
Thanks — we review every report.