CVE-2023-32046

A Microsoft Windows MSHTML vulnerability allows privilege escalation and is currently being exploited in the wild, impacting DIB organizations using Windows systems.

This unspecified vulnerability in the MSHTML platform enables privilege escalation, as evidenced by its inclusion in CISA's Known Exploited Vulnerabilities (KEV) catalog. DIB organizations must immediately patch affected systems to prevent attackers from gaining elevated access and potentially compromising sensitive data, directly impacting NIST 800-171 compliance. Prioritize patching and verification of remediation.

Shame score — The active exploitation of a privilege escalation vulnerability in a core Windows component demonstrates a significant security risk and potential for widespread compromise, especially given the lack of specific details available.