CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2022-220477.8/HIGHEPSS 18.8%CISA KEV
2022-07-12

Windows CSRSS Elevation of Privilege Vulnerability (CVE-2022-22047) Technical Advisory

[Affected Scope] Wide range of Windows operating systems including Windows 10, 11, and Windows Server 2008 through 2022

[Impact] A local authenticated attacker can exploit the vulnerability to execute arbitrary code with SYSTEM privileges by abusing the CSRSS process

[Mitigation] Immediately apply the Microsoft official Cumulative Update (LCU) and monitor for unauthorized local account activities and anomalous child processes

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse