High · 7.8 CVE-2022-37964 EUVD-2022-40571GHSA-c4wf-j959-2jrj

Windows Kernel Elevation of Privilege Vulnerability

Published Sep 13, 2022 · Updated Mar 11, 2025 · Assigned by microsoft

Vendor: Microsoft Product: Windows 7 Product: Windows 7 Service Pack 1 Product: Windows Server 2008 R2 Service Pack 1 Product: Windows Server 2008 R2 Service Pack 1 (Server Core installation) Product: Windows Server 2008 Service Pack 2 Product: Windows Server 2008 Service Pack 2 (Server Core installation) Platform: Windows

Description

Windows Kernel Elevation of Privilege Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows 7	6.1.0 – < 6.1.7601.26115	6.1.7601.26115
Microsoft	Windows 7 Service Pack 1	6.1.0 – < 6.1.7601.26115	6.1.7601.26115
Microsoft	Windows Server 2008 Service Pack 2	6.0.6003.0 – < 6.0.6003.21666	6.0.6003.21666
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	6.0.6003.0 – < 6.0.6003.21666	6.0.6003.21666
Microsoft	Windows Server 2008 Service Pack 2	6.0.6003.0 – < 6.0.6003.21666	6.0.6003.21666
Microsoft	Windows Server 2008 R2 Service Pack 1	6.1.7601.0 – < 6.1.7601.26115	6.1.7601.26115
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	6.1.7601.0 – < 6.1.7601.26115	6.1.7601.26115

Advisories 1

MSRC-CVE-2022-37964 Windows Kernel Elevation of Privilege Vulnerability Microsoft Security Response Center · Sep 13, 2022

References

Windows Kernel Elevation of Privilege Vulnerability vendor-advisory