Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.
Details
What is a Windows PDEV?
A Windows PDEV is a logical representation of the physical device. It is characterized by the type of hardware, logical address, and surfaces that can be supported. As an example of a driver supporting a PDEV characterized by the type of hardware, one driver could support the LaserWhiz, LaserWhiz II, and LaserWhiz Super printers.
For more information on PDEV management see: Managing PDEVs.
Security updates
10.0.17763.2686 — https://support.microsoft.com/help/5011503
10.0.18363.2158 — https://support.microsoft.com/help/5011485
10.0.19043.1586 — https://support.microsoft.com/help/5011487
10.0.20348.587 — https://support.microsoft.com/help/5011497
10.0.20348.580 — https://support.microsoft.com/help/5011580
10.0.22000.556 — https://support.microsoft.com/help/5011493
10.0.10240.19235 — https://support.microsoft.com/help/5011491
10.0.14393.5006 — https://support.microsoft.com/help/5011495
6.1.7601.25898 — https://support.microsoft.com/help/5011552
6.1.7601.25898 — https://support.microsoft.com/help/5011529
6.3.9600.20303 — https://support.microsoft.com/help/5011564
6.3.9600.20303 — https://support.microsoft.com/help/5011560
6.3.9600.20296 — https://support.microsoft.com/help/5010419
6.0.6003.21416 — https://support.microsoft.com/help/5011534
6.0.6003.21416 — https://support.microsoft.com/help/5011525
6.2.9200.23645 — https://support.microsoft.com/help/5011535
6.2.9200.23639 — https://support.microsoft.com/help/5011527
Vulnerabilities 1
-
High 7.8
Windows PDEV Elevation of Privilege Vulnerability
Windows PDEV Elevation of Privilege Vulnerability
Revision history
-
#2
Corrected Download and Article links in the Security Updates table. This is an informational change only.
-
#1
Information published.
References
-
CVE-2022-23299 Windows PDEV Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23299
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss