CVE-2022-37980
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2022-37980 is a newly disclosed vulnerability affecting the Windows DHCP (Dynamic Host Configuration Protocol) Client. This elevation of privilege issue allows an attacker to gain administrative control on a targeted system by exploiting a flaw in the way DHCP Client handles DHCP options. Successful exploitation could lead to serious consequences, including unauthorized access, data theft, or system damage. Microsoft recommends installing the latest security update to mitigate this vulnerability. Users are advised to enable protections such as Network Access Protection and Group Policy settings to minimize potential risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows 10
- Windows Server 2022
- Microsoft Windows 11
Affected Vendors
- Microsoft