CVE-2022-37991

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Oct 11, 2022
Updated: Jan 2, 2025

Summary

CVE-2022-37991 is a Windows Kernel Elevation of Privilege vulnerability. An attacker who exploits this flaw can gain elevated privileges on an affected system. This vulnerability exists due to improper handling of objects in the Windows Kernel. Successful exploitation requires the attacker to have a valid login session on the target system. Microsoft has released a security update to address this issue, and it is recommended that all Windows users install the patch as soon as possible to mitigate the risk. Failure to do so may result in unauthorized access to sensitive information or system compromise.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows Server 2008
  • Microsoft Windows 7
  • Microsoft Windows 10
  • Microsoft Windows 8.1
  • Microsoft Windows Server 2012

Affected Vendors

  • Microsoft