CVE-2022-22047

Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability
18.3%
EPSS
97%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges.

Vendor
Microsoft
Product
Windows
Added to KEV
Jul 12, 2022
Remediation due
Aug 2, 2022 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-426
EPSS
18.3% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded