CVE-2022-24454

Опубликовано: 08 мар. 2022

Источник: msrc

CVSS3: 7.8

EPSS Низкий

Описание

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Обновления

Продукт	Статья	Обновление
Windows 7 for 32-bit Systems Service Pack 1	5011552 5011529	Monthly Rollup Security Only
Windows 7 for x64-based Systems Service Pack 1	5011552 5011529	Monthly Rollup Security Only
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5011552 5011529	Monthly Rollup Security Only
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5011552 5011529	Monthly Rollup Security Only
Windows Server 2012	5011535 5011527	Monthly Rollup Security Only
Windows Server 2012 (Server Core installation)	5011535 5011527	Monthly Rollup Security Only
Windows 8.1 for 32-bit systems	5011564 5011560	Monthly Rollup Security Only
Windows 8.1 for x64-based systems	5011564 5011560	Monthly Rollup Security Only
Windows Server 2012 R2	5011564 5011560	Monthly Rollup Security Only
Windows RT 8.1	5011564	-

Показывать по

Возможность эксплуатации

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 46%

0.00227

Низкий

7.8 High

CVSS3

Связанные уязвимости

CVE-2022-24454

CVSS3: 7.8

nvd

больше 3 лет назад

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

GHSA-54hx-qqpw-43w9

CVSS3: 7.8

github

больше 3 лет назад

Windows Security Support Provider Interface Elevation of Privilege Vulnerability.

BDU:2022-01544

CVSS3: 7.8

fstec

больше 3 лет назад

Уязвимость интерфейса Microsoft Security Support Provider Interface (SSPI) операционной системы Microsoft Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 46%

0.00227

Низкий

7.8 High

CVSS3