Skip to content
OpenAdvisories
High 1 exploited CVE MSRC-CVE-2022-37969 1 CVE

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Published Sep 13, 2022 · Updated Sep 13, 2022

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
An attacker must already have access and the ability to run code on the target system. This technique does not allow for remote code execution in cases where the attacker does not already have that ability on the target system.

Security updates
10.0.17763.3406 — https://support.microsoft.com/help/5017315
10.0.19043.2006 — https://support.microsoft.com/help/5017308
10.0.20348.1006 — https://support.microsoft.com/help/5017316
10.0.20348.916 — https://support.microsoft.com/help/5017392
10.0.22000.978 — https://support.microsoft.com/help/5017328
10.0.10240.19444 — https://support.microsoft.com/help/5017327
10.0.14393.5356 — https://support.microsoft.com/help/5017305
6.1.7601.26115 — https://support.microsoft.com/help/5017361
6.1.7601.26115 — https://support.microsoft.com/help/5017373
6.3.9600.20571 — https://support.microsoft.com/help/5017367
6.3.9600.20571 — https://support.microsoft.com/help/5017365
6.0.6003.21666 — https://support.microsoft.com/help/5017358
6.0.6003.21666 — https://support.microsoft.com/help/5017371
6.2.9200.23865 — https://support.microsoft.com/help/5017370
6.2.9200.23865 — https://support.microsoft.com/help/5017377

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References