MSRC-CVE-2022-22016 — Windows PlayToManager Elevation of Privilege Vulnerability

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.

Security updates
10.0.17763.2928 — https://support.microsoft.com/help/5013941
10.0.18363.2274 — https://support.microsoft.com/help/5013945
10.0.19043.1706 — https://support.microsoft.com/help/5013942
10.0.20348.707 — https://support.microsoft.com/help/5013944
10.0.22000.675 — https://support.microsoft.com/help/5013943
10.0.10240.19297 — https://support.microsoft.com/help/5013963
10.0.14393.5125 — https://support.microsoft.com/help/5013952

Vulnerabilities 1

High 7.0

CVE-2022-22016

Windows PlayToManager Elevation of Privilege Vulnerability

Windows PlayToManager Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 10, 2022

Revision history

2022-05-10 #1
Information published.

References

CVE-2022-22016 Windows PlayToManager Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22016
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss