CVE-2022-37993
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 11, 2022
Updated: Jan 2, 2025
Summary
CVE-2022-37993 is a vulnerability affecting the Windows Group Policy Preference Client component. This issue grants an attacker local user privileges when manipulating specially crafted Group Policy Objects (GPOs). Successful exploitation can lead to code execution and potential escalation of privileges, making it a serious threat to Windows systems. The vulnerability can be mitigated by applying the latest Microsoft security patch or by implementing additional security measures such as restricting GPO editing to trusted users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
- Microsoft Windows 7
- Microsoft Windows 10
- Microsoft Windows 8.1
- Microsoft Windows Server 2012
Affected Vendors
- Microsoft