CVE-2022-37994
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 11, 2022
Updated: Jan 2, 2025
Summary
CVE-2022-37994 is a vulnerability affecting the Windows Group Policy Preference Client. Hackers can exploit this elevation of privilege issue to gain higher system access, bypassing standard user restrictions. Successful exploitation allows attackers to modify or install unauthorized software, potentially leading to data theft or system damage. This vulnerability highlights the importance of applying security patches promptly to mitigate potential risks. Microsoft has released a security update to address this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
- Microsoft Windows 7
- Microsoft Windows 10
- Microsoft Windows 8.1
- Microsoft Windows Server 2012
Affected Vendors
- Microsoft