{
  "GSD": {
    "alias": "CVE-2022-33647",
    "description": "Windows Kerberos Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-33679.",
    "id": "GSD-2022-33647"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-33647"
      ],
      "details": "Windows Kerberos Elevation of Privilege Vulnerability",
      "id": "GSD-2022-33647",
      "modified": "2023-12-13T01:19:23.562674Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2022-33647",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Windows Server 2019",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.17763.3406"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2019 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.17763.3406"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2022",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.20348.1006"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2016",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.14393.5356"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2016 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.14393.5356"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2008 Service Pack 2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.0.0",
                          "version_value": "6.0.6003.21666"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2008 Service Pack 2 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.0.0",
                          "version_value": "6.0.6003.21666"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2008  Service Pack 2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.0.0",
                          "version_value": "6.0.6003.21666"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2008 R2 Service Pack 1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.1.0",
                          "version_value": "6.1.7601.26115"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.0.0",
                          "version_value": "6.1.7601.26115"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2012",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.2.0",
                          "version_value": "6.2.9200.23865"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2012 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.2.0",
                          "version_value": "6.2.9200.23865"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2012 R2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.3.0",
                          "version_value": "6.3.9600.20571"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2012 R2 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.3.0",
                          "version_value": "6.3.9600.20571"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Microsoft"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Windows Kerberos Elevation of Privilege Vulnerability"
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Elevation of Privilege"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647",
            "refsource": "MISC",
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:azure:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2022-33647"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Windows Kerberos Elevation of Privilege Vulnerability"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647",
              "refsource": "MISC",
              "tags": [],
              "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2023-04-11T21:15Z",
      "publishedDate": "2022-09-13T19:15Z"
    }
  }
}

{
  "affected": [],
  "aliases": [
    "CVE-2022-33647"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-09-13T19:15:00Z",
    "severity": "HIGH"
  },
  "details": "Windows Kerberos Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-33679.",
  "id": "GHSA-pch7-5727-grx3",
  "modified": "2022-09-14T00:00:43Z",
  "published": "2022-09-14T00:00:43Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-33647"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647"
    },
    {
      "type": "WEB",
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-33647"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "James Forshaw of \u003ca href=\"https://googleprojectzero.blogspot.com/\"\u003eGoogle Project Zero\u003c/a\u003e"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2022-33647 Windows Kerberos Elevation of Privilege Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647"
      },
      {
        "category": "self",
        "summary": "CVE-2022-33647 Windows Kerberos Elevation of Privilege Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/advisories/2022/msrc_cve-2022-33647.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Windows Kerberos Elevation of Privilege Vulnerability",
    "tracking": {
      "current_release_date": "2022-09-13T07:00:00.000Z",
      "generator": {
        "date": "2025-03-11T16:10:09.573Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2022-33647",
      "initial_release_date": "2022-09-13T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2022-09-13T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.3406",
            "product": {
              "name": "Windows Server 2019 \u003c10.0.17763.3406",
              "product_id": "4"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.3406",
            "product": {
              "name": "Windows Server 2019 10.0.17763.3406",
              "product_id": "11571"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2019"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.3406",
            "product": {
              "name": "Windows Server 2019 (Server Core installation) \u003c10.0.17763.3406",
              "product_id": "3"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.3406",
            "product": {
              "name": "Windows Server 2019 (Server Core installation) 10.0.17763.3406",
              "product_id": "11572"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2019 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.20348.916",
            "product": {
              "name": "Windows Server 2022 \u003c10.0.20348.916",
              "product_id": "2"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.20348.916",
            "product": {
              "name": "Windows Server 2022 10.0.20348.916",
              "product_id": "11923"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.20348.916",
            "product": {
              "name": "Windows Server 2022 (Server Core installation) \u003c10.0.20348.916",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.20348.916",
            "product": {
              "name": "Windows Server 2022 (Server Core installation) 10.0.20348.916",
              "product_id": "11924"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.5356",
            "product": {
              "name": "Windows Server 2016 \u003c10.0.14393.5356",
              "product_id": "6"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.5356",
            "product": {
              "name": "Windows Server 2016 10.0.14393.5356",
              "product_id": "10816"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2016"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.5356",
            "product": {
              "name": "Windows Server 2016 (Server Core installation) \u003c10.0.14393.5356",
              "product_id": "5"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.5356",
            "product": {
              "name": "Windows Server 2016 (Server Core installation) 10.0.14393.5356",
              "product_id": "10855"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2016 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.21666",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 \u003c6.0.6003.21666",
              "product_id": "16"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.21666",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.21666",
              "product_id": "9312"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for 32-bit Systems Service Pack 2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.21666",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) \u003c6.0.6003.21666",
              "product_id": "11"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.21666",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.21666",
              "product_id": "10287"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.21666",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 \u003c6.0.6003.21666",
              "product_id": "15"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.21666",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.21666",
              "product_id": "9318"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for x64-based Systems Service Pack 2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.21666",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) \u003c6.0.6003.21666",
              "product_id": "14"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.21666",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.21666",
              "product_id": "9344"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.1.7601.26115",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 \u003c6.1.7601.26115",
              "product_id": "12"
            }
          },
          {
            "category": "product_version",
            "name": "6.1.7601.26115",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.26115",
              "product_id": "10051"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.1.7601.26115",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) \u003c6.1.7601.26115",
              "product_id": "13"
            }
          },
          {
            "category": "product_version",
            "name": "6.1.7601.26115",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.26115",
              "product_id": "10049"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.2.9200.23865",
            "product": {
              "name": "Windows Server 2012 \u003c6.2.9200.23865",
              "product_id": "10"
            }
          },
          {
            "category": "product_version",
            "name": "6.2.9200.23865",
            "product": {
              "name": "Windows Server 2012 6.2.9200.23865",
              "product_id": "10378"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.2.9200.23865",
            "product": {
              "name": "Windows Server 2012 (Server Core installation) \u003c6.2.9200.23865",
              "product_id": "9"
            }
          },
          {
            "category": "product_version",
            "name": "6.2.9200.23865",
            "product": {
              "name": "Windows Server 2012 (Server Core installation) 6.2.9200.23865",
              "product_id": "10379"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.3.9600.20571",
            "product": {
              "name": "Windows Server 2012 R2 \u003c6.3.9600.20571",
              "product_id": "8"
            }
          },
          {
            "category": "product_version",
            "name": "6.3.9600.20571",
            "product": {
              "name": "Windows Server 2012 R2 6.3.9600.20571",
              "product_id": "10483"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012 R2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.3.9600.20571",
            "product": {
              "name": "Windows Server 2012 R2 (Server Core installation) \u003c6.3.9600.20571",
              "product_id": "7"
            }
          },
          {
            "category": "product_version",
            "name": "6.3.9600.20571",
            "product": {
              "name": "Windows Server 2012 R2 (Server Core installation) 6.3.9600.20571",
              "product_id": "10543"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012 R2 (Server Core installation)"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-33647",
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack.",
          "title": "According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?"
        },
        {
          "category": "faq",
          "text": "An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.",
          "title": "What privileges could be gained by an attacker who successfully exploited this vulnerability?"
        },
        {
          "category": "faq",
          "text": "An unauthenticated attacker could perform a man-in-the-middle network exploit to downgrade a client\u0027s encryption to the RC4-md4 cypher, followed by cracking the user\u0027s cypher key. The attacker could then compromise the user\u0027s Kerberos session key to elevate privileges.",
          "title": "How could an attacker exploit this vulnerability?"
        }
      ],
      "product_status": {
        "fixed": [
          "9312",
          "9318",
          "9344",
          "10049",
          "10051",
          "10287",
          "10378",
          "10379",
          "10483",
          "10543",
          "10816",
          "10855",
          "11571",
          "11572",
          "11923",
          "11924"
        ],
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2022-33647 Windows Kerberos Elevation of Privilege Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647"
        },
        {
          "category": "self",
          "summary": "CVE-2022-33647 Windows Kerberos Elevation of Privilege Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/csaf/advisories/2022/msrc_cve-2022-33647.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-13T07:00:00.000Z",
          "details": "10.0.17763.3406:Security Update:https://support.microsoft.com/help/5017315",
          "product_ids": [
            "4",
            "3"
          ],
          "url": "https://support.microsoft.com/help/5017315"
        },
        {
          "category": "vendor_fix",
          "date": "2022-09-13T07:00:00.000Z",
          "details": "10.0.20348.1006:Security Update:https://support.microsoft.com/help/5017316",
          "product_ids": [
            "2",
            "1"
          ],
          "url": "https://support.microsoft.com/help/5017316"
        },
        {
          "category": "vendor_fix",
          "date": "2022-09-13T07:00:00.000Z",
          "details": "10.0.20348.916:Security Hotpatch Update:https://support.microsoft.com/help/5017392",
          "product_ids": [
            "2",
            "1"
          ],
          "url": "https://support.microsoft.com/help/5017392"
        },
        {
          "category": "vendor_fix",
          "date": "2022-09-13T07:00:00.000Z",
          "details": "10.0.14393.5356:Security Update:https://support.microsoft.com/help/5017305",
          "product_ids": [
            "6",
            "5"
          ],
          "url": "https://support.microsoft.com/help/5017305"
        },
        {
          "category": "vendor_fix",
          "date": "2022-09-13T07:00:00.000Z",
          "details": "6.0.6003.21666:Monthly Rollup:https://support.microsoft.com/help/5017358",
          "product_ids": [
            "16",
            "11",
            "15",
            "14"
          ],
          "url": "https://support.microsoft.com/help/5017358"
        },
        {
          "category": "vendor_fix",
          "date": "2022-09-13T07:00:00.000Z",
          "details": "6.0.6003.21666:Security Only:https://support.microsoft.com/help/5017371",
          "product_ids": [
            "16",
            "11",
            "15",
            "14"
          ],
          "url": "https://support.microsoft.com/help/5017371"
        },
        {
          "category": "vendor_fix",
          "date": "2022-09-13T07:00:00.000Z",
          "details": "6.1.7601.26115:Monthly Rollup:https://support.microsoft.com/help/5017361",
          "product_ids": [
            "12",
            "13"
          ],
          "url": "https://support.microsoft.com/help/5017361"
        },
        {
          "category": "vendor_fix",
          "date": "2022-09-13T07:00:00.000Z",
          "details": "6.1.7601.26115:Security Only:https://support.microsoft.com/help/5017373",
          "product_ids": [
            "12",
            "13"
          ],
          "url": "https://support.microsoft.com/help/5017373"
        },
        {
          "category": "vendor_fix",
          "date": "2022-09-13T07:00:00.000Z",
          "details": "6.2.9200.23865:Monthly Rollup:https://support.microsoft.com/help/5017370",
          "product_ids": [
            "10",
            "9"
          ],
          "url": "https://support.microsoft.com/help/5017370"
        },
        {
          "category": "vendor_fix",
          "date": "2022-09-13T07:00:00.000Z",
          "details": "6.2.9200.23865:Security Only:https://support.microsoft.com/help/5017377",
          "product_ids": [
            "10",
            "9"
          ],
          "url": "https://support.microsoft.com/help/5017377"
        },
        {
          "category": "vendor_fix",
          "date": "2022-09-13T07:00:00.000Z",
          "details": "6.3.9600.20571:Monthly Rollup:https://support.microsoft.com/help/5017367",
          "product_ids": [
            "8",
            "7"
          ],
          "url": "https://support.microsoft.com/help/5017367"
        },
        {
          "category": "vendor_fix",
          "date": "2022-09-13T07:00:00.000Z",
          "details": "6.3.9600.20571:Security Only:https://support.microsoft.com/help/5017365",
          "product_ids": [
            "8",
            "7"
          ],
          "url": "https://support.microsoft.com/help/5017365"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 7.1,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Elevation of Privilege"
        },
        {
          "category": "exploit_status",
          "details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"
        }
      ],
      "title": "Windows Kerberos Elevation of Privilege Vulnerability"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
              "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:azure:*:*:*",
              "matchCriteriaId": "036D57EB-3226-438A-B3E6-0D4698D7EDCD",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Windows Kerberos Elevation of Privilege Vulnerability"
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de Elevaci\u00f3n de Privilegios de Windows Kerberos. Este ID de CVE es diferente de CVE-2022-33679"
    }
  ],
  "id": "CVE-2022-33647",
  "lastModified": "2024-11-21T07:08:14.783",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 5.9,
        "source": "secure@microsoft.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2022-09-13T19:15:09.843",
  "references": [
    {
      "source": "secure@microsoft.com",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows Server 2022",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H1 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 20H2 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H1 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows RT 8.1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H1 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 7 pour syst\u00e8mes x64 Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 20H2 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022 Azure Edition Core Hotpatch",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 8.1 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 20H2 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 8.1 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 7 pour syst\u00e8mes 32 bits Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-35833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35833"
    },
    {
      "name": "CVE-2022-34730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34730"
    },
    {
      "name": "CVE-2022-34724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34724"
    },
    {
      "name": "CVE-2022-35835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35835"
    },
    {
      "name": "CVE-2022-34726",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34726"
    },
    {
      "name": "CVE-2022-35831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35831"
    },
    {
      "name": "CVE-2022-37954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37954"
    },
    {
      "name": "CVE-2022-37959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37959"
    },
    {
      "name": "CVE-2022-34728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34728"
    },
    {
      "name": "CVE-2022-34718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34718"
    },
    {
      "name": "CVE-2022-37955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37955"
    },
    {
      "name": "CVE-2022-30200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30200"
    },
    {
      "name": "CVE-2022-30170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30170"
    },
    {
      "name": "CVE-2022-37958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37958"
    },
    {
      "name": "CVE-2022-33679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33679"
    },
    {
      "name": "CVE-2022-38006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38006"
    },
    {
      "name": "CVE-2022-34722",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34722"
    },
    {
      "name": "CVE-2022-34729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34729"
    },
    {
      "name": "CVE-2022-34723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34723"
    },
    {
      "name": "CVE-2022-35830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35830"
    },
    {
      "name": "CVE-2022-34720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34720"
    },
    {
      "name": "CVE-2022-34725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34725"
    },
    {
      "name": "CVE-2022-35840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35840"
    },
    {
      "name": "CVE-2022-35838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35838"
    },
    {
      "name": "CVE-2022-34732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34732"
    },
    {
      "name": "CVE-2022-30196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30196"
    },
    {
      "name": "CVE-2022-34733",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34733"
    },
    {
      "name": "CVE-2022-35834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35834"
    },
    {
      "name": "CVE-2022-37969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37969"
    },
    {
      "name": "CVE-2022-35832",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35832"
    },
    {
      "name": "CVE-2022-34719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34719"
    },
    {
      "name": "CVE-2022-34721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34721"
    },
    {
      "name": "CVE-2022-35837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35837"
    },
    {
      "name": "CVE-2022-34734",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34734"
    },
    {
      "name": "CVE-2022-23960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23960"
    },
    {
      "name": "CVE-2022-37964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37964"
    },
    {
      "name": "CVE-2022-37956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37956"
    },
    {
      "name": "CVE-2022-33647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33647"
    },
    {
      "name": "CVE-2022-38005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38005"
    },
    {
      "name": "CVE-2022-37957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37957"
    },
    {
      "name": "CVE-2022-38004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38004"
    },
    {
      "name": "CVE-2022-35803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35803"
    },
    {
      "name": "CVE-2022-34731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34731"
    },
    {
      "name": "CVE-2022-34727",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34727"
    },
    {
      "name": "CVE-2022-26928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26928"
    },
    {
      "name": "CVE-2022-35841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35841"
    },
    {
      "name": "CVE-2022-35836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35836"
    }
  ],
  "initial_release_date": "2022-09-20T00:00:00",
  "last_revision_date": "2022-09-20T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38004 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38004"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34719 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34719"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-23960 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23960"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34726 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34726"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34734 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34734"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-30170 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30170"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35803 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35803"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34725 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34725"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34729 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34729"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34730 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34730"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34728 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34728"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35841 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35841"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35830 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35830"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35837 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35837"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34722 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34722"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34732 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34732"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35836 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35836"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34727 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34727"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37955 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37955"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37954 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37954"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33679 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33679"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34718 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34718"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34733 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34733"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35832 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35832"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37958 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37958"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-26928 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26928"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37959 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37959"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35834 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35834"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38005 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38005"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33647 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37964 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37964"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35831 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35831"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34720 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34720"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37956 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37956"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34731 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34731"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-30200 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30200"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35838 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35838"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34721 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34721"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34723 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34723"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35840 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35840"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38006 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38006"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34724 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34724"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37969 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37969"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-30196 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30196"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35835 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35835"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37957 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37957"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35833 du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35833"
    }
  ],
  "reference": "CERTFR-2022-AVI-839",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-09-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Windows\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer un contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9, un d\u00e9ni\nde service, une ex\u00e9cution de code \u00e0 distance, une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 13 septembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/"
    }
  ]
}