CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-10-11
Windows COM+ Event System Service Elevation of Privilege Vulnerability (CVE-2022-41033) Security Advisory
[Affected Scope] Multiple Windows operating system versions including Windows 7, 8.1, 10, 11, and Windows Server 2008, 2012, 2016, 2019, 2022
[Impact] A local authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Immediately apply the official cumulative security updates provided by Microsoft and restrict unnecessary local user accounts and privileges