๐Ÿ” CVE Alert

CVE-2023-0213

HIGH 8.8

Local Elevation of Privilege in M-Files

CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th

Elevation of privilege issue in M-Files Installer versions before 22.6 on Windows allows user to gain SYSTEM privileges via DLL hijacking.

CWE CWE-427
Vendor m-files
Product m-files
Published Mar 29, 2023
Last Updated Feb 23, 2026
Stay Ahead of the Next One

Get instant alerts for m-files m-files

Be the first to know when new high vulnerabilities affecting m-files m-files are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

M-Files / M-Files
0 < 22.6

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
product.m-files.com: https://product.m-files.com/security-advisories/cve-2023-0213/ empower.m-files.com: https://empower.m-files.com/security-advisories/CVE-2023-0213 m-files.com: https://www.m-files.com/about/trust-center/security-advisories/cve-2023-0213/

Credits

Alexander Staalgaard