Skip to content
OpenAdvisories
High MSRC-CVE-2022-41113 1 CVE

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Published Nov 8, 2022 · Updated Oct 12, 2023 · Revision 5

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Security updates
10.0.17763.3887 — https://support.microsoft.com/help/5022286
10.0.19043.2251 — https://support.microsoft.com/help/5019959
10.0.20348.1487 — https://support.microsoft.com/help/5022291
10.0.19042.2486 — https://support.microsoft.com/help/5022282
10.0.22000.1455 — https://support.microsoft.com/help/5022287
10.0.22621.1105 — https://support.microsoft.com/help/5022303

Vulnerabilities 1

Revision history

  1. #5

    In the Security Updates table corrected the Article and Download links for Windows Server 2022 and Windows Server 2022 (Server Core installation). This is an informational change only.

  2. #4

    Updated links to security updates. This is an informational change only.

  3. #3

    Added acknowledgements. This is an informational change only.

  4. #2

    To comprehensively address CVE-2022-41113, Microsoft has released January 2023 security updates for all affected versions of Microsoft Windows. Microsoft strongly recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.

  5. #1

    Information published.

References