CVE-2022-29150

Summary

CVE-2022-29150 is a newly disclosed vulnerability affecting Windows Cluster Shared Volumes (CSV). This elevation of privilege issue grants attackers unauthorized access to CSVs with administrative privileges, allowing them to execute malicious code and potentially take control of the affected system. Successful exploitation depends on an attacker having valid logon credentials, but the severity is high due to the potential impact on critical data and system functionality. Microsoft has released a patch to address this vulnerability, and it is strongly recommended that all affected systems be updated promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.