Windows HTTP.sys CVE-2023-23410 权限提升漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cvepremium.circl.lu/vuln/CVE-2023-23410
• https://cve.circl.lu/vuln/cve-2023-23410
• https://cve.circl.lu/vuln/CVE-2023-23410
• https://vulnerability.circl.lu/vuln/cve-2023-23410
• https://www.secrss.com/articles/54184
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23410
• https://cve.circl.lu/vuln/cve-2023-23410
• https://vulnerability.circl.lu/vuln/CVE-2023-23410
• https://cve.circl.lu/vuln/cve-2023-23410
• https://cvepremium.circl.lu/vuln/CVE-2023-23410
• https://www.fortiguard.com/encyclopedia/ips/52684
• https://medium.com/numen-cyber-labs/analysis-and-summary-of-cve-2023-23410-http-elevation-of-privilege-vulnerability-6893c3a44775
• https://cve.circl.lu/vuln/cve-2023-23410
• https://vulnerability.circl.lu/vuln/cve-2023-23410
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23410

Related Vulnerabilities

• CuteHttpFileServer/chfs存在未授权任意文件上传
• PoCCVE-2017-7504: JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java Deserialization
• PoC迈普无线网络管理系统 /form/exportConfigByHttp 信息泄露漏洞
• Apache HTTP/2 双重释放漏洞(CVE-2026-23918)
• 瑞友天翼应用虚拟化系统 /hmrao.php getCurlHttpGet 服务器端请求伪造漏洞
• NGINX ngx_http_rewrite_module 堆缓冲区溢出漏洞
• PoCCVE-2025-62168: Squid Proxy - HTTP Authentication Credentials Disclosure
• PoCCVE-2026-40466: Apache ActiveMQ - Remote Code Execution via HTTP Discovery Transport Bypass
• PoCspringboot-httpexchanges: Detects Springboot HTTP Exchanges Actuator
• Windows截图工具NTLM信息泄露漏洞(CVE-2026-33829)
• PoCCVE-2025-64500: Symfony HttpFoundation - Access Control Bypass via PATH_INFO
• Gradio /static//windows/win.ini 文件读取漏洞 （CVE-2026-28414）
• Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)