Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
This vulnerability could be triggered when a windows client connects to a malicious remote share.
What privileges could be gained by an attacker who successfully exploited the vulnerability?
A domain user could use this vulnerability to elevate privileges to SYSTEM assigned integrity level.
Security updates
10.0.19043.1889 — https://support.microsoft.com/help/5016616
10.0.22000.856 — https://support.microsoft.com/help/5016629
10.0.20348.887 — https://support.microsoft.com/help/5016627
6.2.9200.23817 — https://support.microsoft.com/help/5016672
6.2.9200.23817 — https://support.microsoft.com/help/5016684
10.0.17763.3287 — https://support.microsoft.com/help/5016623
10.0.14393.5291 — https://support.microsoft.com/help/5016622
10.0.10240.19387 — https://support.microsoft.com/help/5016639
6.3.9600.20520 — https://support.microsoft.com/help/5016681
6.3.9600.20520 — https://support.microsoft.com/help/5016683
6.1.7601.26065 — https://support.microsoft.com/help/5016676
6.1.7601.26065 — https://support.microsoft.com/help/5016679
Vulnerabilities 1
-
High 7.8
Microsoft ATA Port Driver Elevation of Privilege Vulnerability
Microsoft ATA Port Driver Elevation of Privilege Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2022-35760 Microsoft ATA Port Driver Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35760
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss