{"metadata": {"vulnerability": "CVE-2023-21752", "count": 56, "kinds": {"milestone": 7, "sighting": 22, "kev": 0, "other": 27}}, "data": [{"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-21752", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-21752", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-01-10T08:00:00Z", "date_only": false, "value": "2023-01-10T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-21752", "record": "MSRC_CVE-2023-21752", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-01-10T08:00:00Z", "date_only": false, "value": "2023-01-10T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-21752", "record": "MSRC_CVE-2023-21752", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-01-10T08:00:00Z", "date_only": false, "value": "2023-01-10T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2023-21752", "field": "containers.cna.datePublic"}, {"timestamp": "2023-01-10T08:00:00Z", "date_only": false, "value": "2023-01-10T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-21752", "record": "MSRC_CVE-2023-21752", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-01-10T08:00:00Z", "date_only": false, "value": "2023-01-10T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-21752", "record": "MSRC_CVE-2023-21752", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-01-10T22:15:00Z", "date_only": false, "value": "2023-01-10T22:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4V5X-38HQ-2RVF", "record": "GHSA-4V5X-38HQ-2RVF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-01-10T22:15:00Z", "date_only": false, "value": "2023-01-10T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-21752", "record": "GSD-2023-21752", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-01-10T22:15:18.433Z", "date_only": false, "value": "2023-01-10T22:15:18.433", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-21752", "record": "FKIE_CVE-2023-21752", "field": "published"}, {"timestamp": "2023-01-10T23:00:00Z", "date_only": false, "value": "2023-01-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-01-10T23:00:00Z", "date_only": false, "value": "2023-01-10T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-01-10T23:00:00Z", "date_only": false, "value": "2023-01-10T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-01-11T00:00:00Z", "date_only": false, "value": "2023-01-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0022", "record": "CERTFR-2023-AVI-0022", "field": "last_revision_date"}, {"timestamp": "2023-01-11T00:00:00Z", "date_only": false, "value": "2023-01-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0022", "record": "CERTFR-2023-AVI-0022", "field": "initial_release_date"}, {"timestamp": "2023-01-11T00:00:00Z", "date_only": false, "value": "2023-01-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0022", "record": "CERTFR-2023-AVI-0022", "field": "revisions.0.revision_date"}, {"timestamp": "2023-01-11T00:30:46Z", "date_only": false, "value": "2023-01-11T00:30:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4V5X-38HQ-2RVF", "record": "GHSA-4V5X-38HQ-2RVF", "field": "published"}, {"timestamp": "2023-01-11T00:30:46Z", "date_only": false, "value": "2023-01-11T00:30:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4V5X-38HQ-2RVF", "record": "GHSA-4V5X-38HQ-2RVF", "field": "modified"}, {"timestamp": "2023-01-12T00:00:00Z", "date_only": true, "value": "2023-01-12", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-02699", "record": "CNVD-2023-02699", "field": "submitTime"}, {"timestamp": "2023-01-12T06:15:30Z", "date_only": false, "value": "2023-01-12T06:15:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/1284", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "626a7cff-819c-4af4-9883-04d0f384a5fa", "content": "CVE-2023-21752\n\u0421\u0432\u0435\u0436\u0430\u0439\u0448\u0430\u044f \u0414\u044b\u0440\u0430 (\u043e\u0442 10 \u044f\u043d\u0432\u0430\u0440\u044f) \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Windows\nLPE \u043e\u0442 \u044e\u0437\u0435\u0440\u0430 \u0434\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u044b\nAbout vuln\nexploit\n\n#windows #exploit #lpe", "url": "https://t.me/proxy_bar/1284"}, {"timestamp": "2023-01-12T06:49:19Z", "date_only": false, "value": "2023-01-12T06:49:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/393", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "04c2fd50-e57e-48b5-8bed-782f951ac272", "content": "https://github.com/Wh04m1001/CVE-2023-21752", "url": "https://t.me/CNArsenal/393"}, {"timestamp": "2023-01-13T00:00:00Z", "date_only": true, "value": "2023-01-13", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-02699", "record": "CNVD-2023-02699", "field": "openTime"}, {"timestamp": "2023-01-13T11:05:12Z", "date_only": false, "value": "2023-01-13T11:05:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7538", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "dc8141cc-a8b6-4089-9aa0-734b76fa7284", "content": "#exploit\n1. PoC for arbitrary file delete/move in Razer Synapse 3 Macro module\nhttps://github.com/Wh04m1001/RazerEoP\n\n2. CVE-2023-21752:\nPoC for arbitrary file delete vulnerability in Windows Backup service\nhttps://github.com/Wh04m1001/CVE-2023-21752", "url": "https://t.me/CyberSecurityTechnologies/7538"}, {"timestamp": "2023-01-13T14:55:43Z", "date_only": false, "value": "2023-01-13T14:55:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/2240", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "6ef08ba7-1c46-4847-be7d-1efcf4a36cd8", "content": "#exploit\n1. PoC for arbitrary file delete/move in Razer Synapse 3 Macro module\nhttps://github.com/Wh04m1001/RazerEoP\n\n2. CVE-2023-21752:\nPoC for arbitrary file delete vulnerability in Windows Backup service\nhttps://github.com/Wh04m1001/CVE-2023-21752", "url": "https://t.me/crackcodes/2240"}, {"timestamp": "2023-01-13T20:20:41Z", "date_only": false, "value": "2023-01-13T20:20:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arvin_club/6361", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "107840c9-38c2-43fa-b182-fc9092f72d6c", "content": "CVE-2023-21752\nPoC for arbitrary file delete vulnerability in Windows Backup service\nhttps://github.com/Wh04m1001/CVE-2023-21752", "url": "https://t.me/arvin_club/6361"}, {"timestamp": "2023-01-13T21:10:00Z", "date_only": false, "value": "2023-01-13T21:10:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/breachdetector/181124", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "ed6a532d-6843-486a-aa4c-41c80692e6d1", "content": "{\n  \"Source\": \"arvin_club\",\n  \"Content\": \"CVE-2023-21752 PoC for arbitrary file delete vulnerability in Windows Backup service https://github.com/Wh04m1001/CVE-2023-21752 GitHubGitHub - Wh04m1001/CVE-2023-21752 Contribute to Wh04m1001/CVE-2023-21752 development by creating an account on GitHub.\", \n  \"author\": \"ARVIN\",\n  \"Detection Date\": \"13 Jan 2023\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "url": "https://t.me/breachdetector/181124"}, {"timestamp": "2023-01-14T06:38:22Z", "date_only": false, "value": "2023-01-14T06:38:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/2251", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "e631b822-5507-414f-9b88-7fca92900243", "content": "CVE-2023-21752\nPoC for arbitrary file delete vulnerability in Windows Backup service\n https://system32.ink/news-feed/p/133/", "url": "https://t.me/crackcodes/2251"}, {"timestamp": "2023-01-15T10:42:32Z", "date_only": false, "value": "2023-01-15T10:42:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/10605", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "bf12edf2-4d53-49aa-8d0e-b883bc54e299", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2023-21752: PoC for arbitrary file delete vulnerability in Windows Backup service.\n\nhttps://github.com/Wh04m1001/CVE-2023-21752", "url": "https://t.me/cKure/10605"}, {"timestamp": "2023-01-15T14:30:52Z", "date_only": false, "value": "2023-01-15T14:30:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZaYZAOQtmgzH1H3gbOVZkvb4uoesQgtbaV_yPeRmQ3kCIr8", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "913400d1-cda0-449d-99a2-68f8f4ed1407"}, {"timestamp": "2023-01-30T16:43:35Z", "date_only": false, "value": "2023-01-30T16:43:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/malwar3s/25", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "3649fe16-a3b2-4388-9a03-70f34a33b1ab", "content": "https://github.com/Wh04m1001/CVE-2023-21752", "url": "https://t.me/malwar3s/25"}, {"timestamp": "2023-01-31T23:00:00Z", "date_only": false, "value": "2023-01-31T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-02-03T05:32:06Z", "date_only": false, "value": "2023-02-03T05:32:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Gw8Rl0iP5mnAV1DMWzM0BsX5C_PaNBR5T09Ku44Y28qZWKw", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "bdf133bc-56c4-43d2-bee9-e76bdaab4d06"}, {"timestamp": "2023-02-05T06:39:05Z", "date_only": false, "value": "2023-02-05T06:39:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Bo5tYOUtsdBAMbfduJyemQF2sSG4nO7l9uufHxEDusCNWCs", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "d0ae9097-6e79-4bf3-9560-668ddd20aa41"}, {"timestamp": "2023-02-08T23:37:33Z", "date_only": false, "value": "2023-02-08T23:37:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/binary_xor/646", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "92bab4b7-806c-4392-a16b-2d071e8177ae", "content": "#windows #cve #lpe\n\n[ CVE-2023-21752 ]\n\u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\n\nhttps://github.com/Wh04m1001/CVE-2023-21752", "url": "https://t.me/binary_xor/646"}, {"timestamp": "2023-02-23T06:04:45Z", "date_only": false, "value": "2023-02-23T06:04:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ckuRED/246", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "2435d4cf-831a-40c5-b7a0-bc61aa9cb6c8", "content": "CVE-2023-21752; allows a basic user to execute arbitrary code on a host to delete files from [a] specified storage path, from Windows Backup and Restore service.\n\nThe vulnerability is triggered using the Race Condition between temporary file creation and deletion, which takes place following the authentication process.\n\nhttps://cloudsek.com/threatintelligence/cve-2023-21752-privilege-escalation-vulnerability-on-windows-backup-service\n\nhttps://www.infosecurity-magazine.com/news/hackers-exploit-flaw-windows/", "url": "https://t.me/ckuRED/246"}, {"timestamp": "2023-02-23T06:04:54Z", "date_only": false, "value": "2023-02-23T06:04:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/10704", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "acc305a3-8ebb-49c9-ba85-179653d351e8", "content": "CVE-2023-21752; allows a basic user to execute arbitrary code on a host to delete files from [a] specified storage path, from Windows Backup and Restore service.\n\nThe vulnerability is triggered using the Race Condition between temporary file creation and deletion, which takes place following the authentication process.\n\nhttps://cloudsek.com/threatintelligence/cve-2023-21752-privilege-escalation-vulnerability-on-windows-backup-service\n\nhttps://www.infosecurity-magazine.com/news/hackers-exploit-flaw-windows/", "url": "https://t.me/cKure/10704"}, {"timestamp": "2023-04-27T19:15:00Z", "date_only": false, "value": "2023-04-27T19:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-21752", "record": "GSD-2023-21752", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:25.771Z", "date_only": false, "value": "2023-12-13T01:20:25.771723Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-21752", "record": "GSD-2023-21752", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-16T12:45:00Z", "date_only": false, "value": "2023-12-16T12:45:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1820", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "c8259e9a-9dcc-49da-a08e-0ba2d3ad0236", "content": "#ExploitObserverAlert\n\nCVE-2023-21752\n\nDESCRIPTION: Exploit Observer has 11 entries related to CVE-2023-21752. Windows Backup Service Elevation of Privilege Vulnerability\n\nFIRST-EPSS: 0.030750000\nNVD-IS: 5.2\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1820"}, {"timestamp": "2024-08-02T09:51:50.453Z", "date_only": false, "value": "2024-08-02T09:51:50.453Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-21752", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-08T17:54:29.938Z", "date_only": false, "value": "2024-10-08T17:54:29.938079Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-21752", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-08T17:54:29.938Z", "date_only": false, "value": "2024-10-08T17:54:29.938079Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-21752", "record": "FKIE_CVE-2023-21752", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-08T17:55:01.435Z", "date_only": false, "value": "2024-10-08T17:55:01.435Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-21752", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-01T00:35:27.474Z", "date_only": false, "value": "2025-01-01T00:35:27.474Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-21752", "record": "MSRC_CVE-2023-21752", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-01T00:36:01.058Z", "date_only": false, "value": "2025-01-01T00:36:01.058Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-21752", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-01T00:36:01.058Z", "date_only": false, "value": "2025-01-01T00:36:01.058Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2023-21752", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-14T22:00:00Z", "date_only": false, "value": "2025-05-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-05-14T22:00:00Z", "date_only": false, "value": "2025-05-14T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-15T11:39:23.656Z", "date_only": false, "value": "2025-05-15T11:39:23.656+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T05:33:53.100Z", "date_only": false, "value": "2026-06-17T05:33:53.100", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-21752", "record": "FKIE_CVE-2023-21752", "field": "lastModified"}, {"timestamp": "2026-07-29T12:00:11.614Z", "date_only": false, "value": "2026-07-29T12:00:11.614348Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/17935", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "608e908e-d86b-45d9-a6ef-fca6dc0bcd61", "url": "https://t.me/CVEhub/17935"}, {"timestamp": "2026-07-30T00:00:06.065Z", "date_only": false, "value": "2026-07-30T00:00:06.065422Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/17935", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "798783ba-3fa3-42d8-b19a-18786091eef0", "url": "https://t.me/CVEhub/17935"}, {"timestamp": "2026-09-01T17:00:24.066Z", "date_only": false, "value": "2026-09-01T17:00:24.066238Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6474", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "35af14ce-5201-4ca7-9281-ae644d6d256e", "url": "https://t.me/cissp/6474"}, {"timestamp": "2026-09-10T04:00:04.711Z", "date_only": false, "value": "2026-09-10T04:00:04.711177Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6474", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "94b9543d-7c20-486f-a924-af3845363b9f", "url": "https://t.me/cissp/6474"}, {"timestamp": "2026-10-25T10:01:08Z", "date_only": false, "value": "2026-10-25T10:01:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107160", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "d080a442-fb5b-4478-a8a9-1b58ded18556", "url": "https://t.me/GithubRedTeam/107160"}, {"timestamp": "2026-10-25T10:01:08Z", "date_only": false, "value": "2026-10-25T10:01:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/107160", "record": "CVE-2023-21752", "field": "creation_timestamp", "uuid": "2c82acf1-a8d6-4ad8-93cf-301fcd1c6286", "url": "https://t.me/GithubRedTeam/107160"}]}