Windows HTTP.sys CVE-2023-23410 权限提升漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cvepremium.circl.lu/vuln/CVE-2023-23410
• https://cve.circl.lu/vuln/cve-2023-23410
• https://cve.circl.lu/vuln/CVE-2023-23410
• https://vulnerability.circl.lu/vuln/cve-2023-23410
• https://www.secrss.com/articles/54184
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23410
• https://cve.circl.lu/vuln/cve-2023-23410
• https://vulnerability.circl.lu/vuln/CVE-2023-23410
• https://cve.circl.lu/vuln/cve-2023-23410
• https://cvepremium.circl.lu/vuln/CVE-2023-23410
• https://www.fortiguard.com/encyclopedia/ips/52684
• https://medium.com/numen-cyber-labs/analysis-and-summary-of-cve-2023-23410-http-elevation-of-privilege-vulnerability-6893c3a44775
• https://cve.circl.lu/vuln/cve-2023-23410
• https://vulnerability.circl.lu/vuln/cve-2023-23410
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23410

Related Vulnerabilities

• PoCmcp-streamable-http-exposure: MCP Streamable HTTP Server - Unauthenticated Initialize
• PoChttp-etcd-unauthenticated-api-v3: etcd v3 Unauthenticated API
• PoChttp-etcd-unauthenticated-raft: etcd RAFT Unauthenticated API
• CuteHttpFileServer/chfs存在未授权任意文件上传
• PoCCVE-2017-7504: JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java Deserialization
• PoC迈普无线网络管理系统 /form/exportConfigByHttp 信息泄露漏洞
• Apache HTTP/2 双重释放漏洞(CVE-2026-23918)
• 瑞友天翼应用虚拟化系统 /hmrao.php getCurlHttpGet 服务器端请求伪造漏洞
• NGINX ngx_http_rewrite_module 堆缓冲区溢出漏洞
• PoCCVE-2025-62168: Squid Proxy - HTTP Authentication Credentials Disclosure
• PoCCVE-2026-40466: Apache ActiveMQ - Remote Code Execution via HTTP Discovery Transport Bypass
• PoCspringboot-httpexchanges: Detects Springboot HTTP Exchanges Actuator
• Windows截图工具NTLM信息泄露漏洞(CVE-2026-33829)