CVE-2022-37967

Summary

CVE-2022-37967 is a recently disclosed Windows Kerberos Elevation of Privilege vulnerability. This issue allows an attacker to gain elevated privileges by manipulating certain Kerberos tickets. Successful exploitation can result in the attacker gaining control over a affected system, potentially leading to significant data theft or system compromise. The vulnerability affects Windows Servers 2008, 2012, 2016, and 2019, and Microsoft recommends immediate patching to mitigate the risk. This vulnerability can be exploited remotely, making it a serious threat to organizations with exposed Windows servers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.