CVE-2022-37999

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Oct 11, 2022
Updated: Jan 2, 2025

Summary

CVE-2022-37999 is a vulnerability affecting the Windows Group Policy Preference (GPP) Client-side component. An attacker can exploit this elevation of privilege issue to gain higher system access, by manipulating specially crafted GPP files. Successful exploitation could lead to significant security implications, such as data theft or unauthorized system modifications. Organizations are strongly advised to apply the Microsoft Security Bulletin MS16-088 patch or update to the latest version of the GPP Client to mitigate this risk. This vulnerability underscores the importance of keeping software up-to-date to protect against cyber threats.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows Server 2008
  • Microsoft Windows 7
  • Microsoft Windows 10
  • Microsoft Windows 8.1
  • Microsoft Windows Server 2012

Affected Vendors

  • Microsoft