CVE-2022-38050
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 11, 2022
Updated: Jan 2, 2025
Summary
CVE-2022-38050 is a Win32k elevation of privilege vulnerability. Malicious actors can exploit this weakness to gain higher system privileges, potentially leading to unauthorized access or data theft. The vulnerability exists due to an improper handling of objects in Win32k, a critical Windows component. It is recommended that users install the available Microsoft patch as soon as possible to mitigate this risk. Failure to address this issue could result in serious security consequences.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows 10
- Windows Server 2022
- Microsoft Windows 11
- Microsoft Windows Server 2019
Affected Vendors
- Microsoft