Skip to content
OpenAdvisories
High MSRC-CVE-2022-30170 1 CVE

Windows Credential Roaming Service Elevation of Privilege Vulnerability

Published Sep 13, 2022 · Updated Mar 11, 2025 · Revision 2

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
Exploitation of the vulnerability requires that a user to log in to Windows.

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited the vulnerability could gain remote interactive logon rights to a machine where the victim's account would not normally hold such privilege.

Security updates
10.0.25398.1486 — https://support.microsoft.com/help/5053599
10.0.17763.3406 — https://support.microsoft.com/help/5017315
10.0.19043.2006 — https://support.microsoft.com/help/5017308
10.0.20348.1006 — https://support.microsoft.com/help/5017316
10.0.20348.916 — https://support.microsoft.com/help/5017392
10.0.22000.978 — https://support.microsoft.com/help/5017328
10.0.10240.19444 — https://support.microsoft.com/help/5017327
10.0.14393.5356 — https://support.microsoft.com/help/5017305
6.1.7601.26115 — https://support.microsoft.com/help/5017361
6.1.7601.26115 — https://support.microsoft.com/help/5017373
6.3.9600.20571 — https://support.microsoft.com/help/5017367
6.3.9600.20571 — https://support.microsoft.com/help/5017365
6.0.6003.21666 — https://support.microsoft.com/help/5017358
6.0.6003.21666 — https://support.microsoft.com/help/5017371
6.2.9200.23865 — https://support.microsoft.com/help/5017370
6.2.9200.23865 — https://support.microsoft.com/help/5017377

Vulnerabilities 1

Revision history

  1. #2

    In the Security Updates table added Windows Server 2022, 23H2 Edition (Server Core installation) as it is affected by this vulnerability. Microsoft recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.

  2. #1

    Information published.

References