CVE-2022-41125

Опубликовано: 08 нояб. 2022

Источник: msrc

CVSS3: 7.8

EPSS Низкий

Описание

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Продукт	Статья	Обновление
Windows Server 2012	5020009 5020003	Monthly Rollup Security Only
Windows Server 2012 (Server Core installation)	5020009 5020003	Monthly Rollup Security Only
Windows 8.1 for 32-bit systems	5020023 5020010	Monthly Rollup Security Only
Windows 8.1 for x64-based systems	5020023 5020010	Monthly Rollup Security Only
Windows Server 2012 R2	5020023 5020010	Monthly Rollup Security Only
Windows RT 8.1	5020010	-
Windows Server 2012 R2 (Server Core installation)	5020023 5020010	Monthly Rollup Security Only
Windows 10 for 32-bit Systems	5019970	Security Update
Windows 10 for x64-based Systems	5019970	Security Update
Windows Server 2016	5019964	Security Update

Показывать по

Publicly Disclosed

Exploited

Yes

Latest Software Release

Exploitation Detected

DOS

N/A

EPSS

Процентиль: 66%

0.00529

Низкий

7.8 High

CVSS3

CVE-2022-41125

CVSS3: 7.8

nvd

больше 2 лет назад

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

GHSA-5vr9-7945-27pf

CVSS3: 7.8

github

больше 2 лет назад

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability.

BDU:2022-06721

CVSS3: 7.8

fstec

больше 2 лет назад

Уязвимость службы CNG Key Isolation операционной системы Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 66%

0.00529

Низкий

7.8 High

CVSS3