CVE-2022-23279

3 documents3 sources
Severity
7.0HIGH
No vector
EPSS
1.4%
top 19.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Microsoft Windows 10 Version 1909Microsoft Windows 10 Version 20h2Microsoft Windows 10 Version 21h1+4 more
Timeline
PublishedMay 10
Latest updateMay 11

Description

Windows ALPC Elevation of Privilege Vulnerability Windows ALPC Elevation of Privilege Vulnerability

Affected Packages7 packages

▶CVEListV5microsoft/windows_server_202210.0.20348.0 — 10.0.20348.707
▶CVEListV5microsoft/windows_10_version_190910.0.0 — 10.0.18363.2274
▶CVEListV5microsoft/windows_10_version_20h210.0.0 — 10.0.19042.1706
▶CVEListV5microsoft/windows_10_version_21h110.0.0 — 10.0.19043.1706
▶CVEListV5microsoft/windows_10_version_21h210.0.19043.0 — 10.0.19043.1706

🔴Vulnerability Details

2
GHSA
GHSA-h9fv-c74q-375h: Windows ALPC Elevation of Privilege Vulnerability↗2022-05-11
▶
CVEList
Windows ALPC Elevation of Privilege Vulnerability↗2022-05-10
▶

📋Vendor Advisories

1
Microsoft
Windows ALPC Elevation of Privilege Vulnerability↗2022-05-10
▶
CVE-2022-23279 (HIGH CVSS 7) | Windows ALPC Elevation of Privilege | cvebase.io