CVE-2022-37987
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 11, 2022
Updated: Jan 2, 2025
Summary
CVE-2022-37987 is an elevation of privilege vulnerability affecting the Windows Client Server Run-time Subsystem (CSRSS). Successful exploitation of this issue allows an attacker to gain higher privilege levels on a Windows system, potentially leading to significant security implications. The vulnerability arises due to a flaw in the handling of certain processes and could result in escalated access to sensitive data or functions. Microsoft recommends installing the latest security updates to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
- Microsoft Windows 7
- Microsoft Windows 10
- Microsoft Windows 8.1
- Microsoft Windows Server 2012
Affected Vendors
- Microsoft