CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows CSRSS Elevation of Privilege Vulnerability (CVE-2022-22047) Technical Advisory
[Affected Scope] Wide range of Windows operating systems including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] A local authenticated attacker can exploit the vulnerability to execute arbitrary code with SYSTEM privileges by abusing the CSRSS process
[Mitigation] Immediately apply the Microsoft official Cumulative Update (LCU) and monitor for unauthorized local account activities and anomalous child processes
Windows CSRSS Process Token Mismanagement Local Privilege Escalation Vulnerability (CVE-2016-0151, MS16-048)
[Affected Scope] Microsoft Windows 8.1, Windows Server 2012 and R2, Windows RT 8.1, and Windows 10 (Gold and 1511).
[Impact] A local attacker can execute a crafted application to exploit improper token management in CSRSS, gaining elevated SYSTEM privileges and executing arbitrary code.
[Mitigation] Apply the official Microsoft security updates (MS16-048) immediately and restrict local execution privileges on unpatched systems.