Skip to content
OpenAdvisories
High MSRC-CVE-2022-37983 1 CVE

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Published Oct 11, 2022 · Updated Oct 11, 2022

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
This vulnerability is subject to a local escalation of privilege attack. The attacker would most likely arrange to run an executable or script on the local computer. An attacker could gain access to the computer through a variety of methods, such as via a phishing attack where a user clicks an executable file that is attached to an email.

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Security updates
10.0.17763.3532 — https://support.microsoft.com/help/5018419
10.0.19043.2130 — https://support.microsoft.com/help/5018410
10.0.20348.1129 — https://support.microsoft.com/help/5018421
10.0.22000.1098 — https://support.microsoft.com/help/5018418
10.0.22621.674 — https://support.microsoft.com/help/5018427

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References