Vulnerability-Lookup

CVE-2022-41073 (GCVE-0-2022-41073)

Vulnerability from cvelistv5 – Published: 2022-11-09 00:00 – Updated: 2025-10-21 23:15

CISA KEV KEVintel KEV

Title

Windows Print Spooler Elevation of Privilege Vulnerability

Summary

Windows Print Spooler Elevation of Privilege Vulnerability

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

Elevation of Privilege
CWE-787 - Out-of-bounds Write

Assigner

microsoft

References

3 references

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory
http://packetstormsecurity.com/files/174528/Micro…	x_transferred
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

27 products

Vendor	Product	Version
Microsoft	Windows 10 Version 1809	Affected: 10.0.17763.0 , < 10.0.17763.3650 (custom)
Microsoft	Windows 10 Version 1809	Affected: 10.0.0 , < 10.0.17763.3650 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.3650 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.3650 (custom)
Microsoft	Windows 10 Version 21H1	Affected: 10.0.0 , < 10.0.19043.2251 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.1249 (custom)
Microsoft	Windows 10 Version 20H2	Affected: 10.0.0 , < 10.0.19042.2251 (custom)
Microsoft	Windows 11 version 21H2	Affected: 10.0.0 , < 10.0.22000.1219 (custom)
Microsoft	Windows 10 Version 21H2	Affected: 10.0.19043.0 , < 10.0.19044.2251 (custom)
Microsoft	Windows 11 version 22H2	Affected: 10.0.22621.0 , < 10.0.22621.819 (custom)
Microsoft	Windows 10 Version 22H2	Affected: 10.0.19045.0 , < 10.0.19045.2251 (custom)
Microsoft	Windows 10 Version 1507	Affected: 10.0.10240.0 , < 10.0.10240.19567 (custom)
Microsoft	Windows 10 Version 1607	Affected: 10.0.14393.0 , < 10.0.14393.5501 (custom)
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.5501 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.5501 (custom)
Microsoft	Windows 7	Affected: 6.1.0 , < 6.1.7601.26221 (custom)
Microsoft	Windows 7 Service Pack 1	Affected: 6.1.0 , < 6.1.7601.26221 (custom)
Microsoft	Windows 8.1	Affected: 6.3.0 , < 6.3.9600.20671 (custom)
Microsoft	Windows Server 2008 Service Pack 2	Affected: 6.0.6003.0 , < 6.0.6003.21768 (custom)
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	Affected: 6.0.6003.0 , < 6.0.6003.21768 (custom)
Microsoft	Windows Server 2008 Service Pack 2	Affected: 6.0.6003.0 , < 6.0.6003.21768 (custom)
Microsoft	Windows Server 2008 R2 Service Pack 1	Affected: 6.1.7601.0 , < 6.1.7601.26221 (custom)
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	Affected: 6.1.7601.0 , < 6.1.7601.26221 (custom)
Microsoft	Windows Server 2012	Affected: 6.2.9200.0 , < 6.2.9200.23968 (custom)
Microsoft	Windows Server 2012 (Server Core installation)	Affected: 6.2.9200.0 , < 6.2.9200.23968 (custom)
Microsoft	Windows Server 2012 R2	Affected: 6.3.9600.0 , < 6.3.9600.20671 (custom)
Microsoft	Windows Server 2012 R2 (Server Core installation)	Affected: 6.3.9600.0 , < 6.3.9600.20671 (custom)

Date Public

2022-11-08 08:00

CISA KEV

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 2b7c56f8-d0e6-40cc-86b5-25b84373d912

Vulnerability ID: CVE-2022-41073

Status: Confirmed

Status Updated: 2022-11-08 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2022-11-08

Asserted: 2022-11-08

Scope

Notes: KEV entry: Microsoft Windows Print Spooler Privilege Escalation Vulnerability | Affected: Microsoft / Windows | Description: Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges. | Required action: Apply updates per vendor instructions. | Due date: 2022-12-09 | Known ransomware campaign use (KEV): Known | Notes (KEV): https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41073; https://nvd.nist.gov/vuln/detail/CVE-2022-41073

Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details

Cwes	CWE-787
Feed	CISA Known Exploited Vulnerabilities Catalog
Product	Windows
Due Date	2022-12-09
Date Added	2022-11-08
Vendorproject	Microsoft
Vulnerabilityname	Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Knownransomwarecampaignuse	Known

References

CVE-2022-41073

Created: 2026-02-02 12:27 UTC | Updated: 2026-02-06 07:17 UTC

KEVintel KEV

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 4101bbc8-99e1-4df6-b6b5-458983201dc7

Vulnerability ID: CVE-2022-41073

Status: Confirmed

Status Updated: 2022-11-08 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2022-11-08

Asserted: 2022-11-08

Scope

Notes: KEVIntel entry: Windows Print Spooler Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False

Evidence

Type: Public Report

Signal: Confirmed Compromise

Confidence: 70%

Source: kevintel

Details

Feed	KEVIntel (kevintel.com)
Title	Windows Print Spooler Elevation of Privilege Vulnerability
Vendor	Microsoft
Product	Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)
Added Date	2022-11-08T00:00:00.000Z
Cvss Score	7.8
Epss Score	None
Cvss Severity	HIGH
Epss Percentile	None
Used In Malware	yes
Ahead Of Cisa Kev	None
Not Yet In Cisa Kev	False

References

Created: 2026-06-19 12:47 UTC | Updated: 2026-06-19 12:47 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T12:35:49.109Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Windows Print Spooler Elevation of Privilege Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-41073",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-12-22T05:00:59.020458Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2022-11-08",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41073"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:15:32.100Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41073"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2022-11-08T00:00:00.000Z",
            "value": "CVE-2022-41073 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.3650",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.3650",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.3650",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.3650",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems",
            "32-bit Systems"
          ],
          "product": "Windows 10 Version 21H1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19043.2251",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.1249",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems"
          ],
          "product": "Windows 10 Version 20H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19042.2251",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22000.1219",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.2251",
              "status": "affected",
              "version": "10.0.19043.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.819",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems",
            "32-bit Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.2251",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1507",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10240.19567",
              "status": "affected",
              "version": "10.0.10240.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.5501",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.5501",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.5501",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems"
          ],
          "product": "Windows 7",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.26221",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 7 Service Pack 1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.26221",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "product": "Windows 8.1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.20671",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.21768",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.21768",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008  Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.21768",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.26221",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.26221",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.23968",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.23968",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.20671",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.20671",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.3650",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.17763.3650",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.3650",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.3650",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H1:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19043.2251",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.1249",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19042.2251",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22000.1219",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.2251",
                  "versionStartIncluding": "10.0.19043.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22621.819",
                  "versionStartIncluding": "10.0.22621.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.2251",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.10240.19567",
                  "versionStartIncluding": "10.0.10240.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.5501",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.5501",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.5501",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*",
                  "versionEndExcluding": "6.1.7601.26221",
                  "versionStartIncluding": "6.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.26221",
                  "versionStartIncluding": "6.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "6.3.9600.20671",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.0.6003.21768",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.0.6003.21768",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "6.0.6003.21768",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.26221",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.26221",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.23968",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.23968",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.20671",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.20671",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-11-08T08:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Windows Print Spooler Elevation of Privilege Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-02T21:31:55.267Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows Print Spooler Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
        }
      ],
      "title": "Windows Print Spooler Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-41073",
    "datePublished": "2022-11-09T00:00:00.000Z",
    "dateReserved": "2022-09-19T00:00:00.000Z",
    "dateUpdated": "2025-10-21T23:15:32.100Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2022-41073",
      "cwes": "[\"CWE-787\"]",
      "dateAdded": "2022-11-08",
      "dueDate": "2022-12-09",
      "knownRansomwareCampaignUse": "Known",
      "notes": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41073;  https://nvd.nist.gov/vuln/detail/CVE-2022-41073",
      "product": "Windows",
      "requiredAction": "Apply updates per vendor instructions.",
      "shortDescription": "Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.",
      "vendorProject": "Microsoft",
      "vulnerabilityName": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability"
    },
    "epss": {
      "cve": "CVE-2022-41073",
      "date": "2026-06-18",
      "epss": "0.02389",
      "percentile": "0.81791"
    },
    "fkie_nvd": {
      "cisaActionDue": "2022-12-09",
      "cisaExploitAdd": "2022-11-08",
      "cisaRequiredAction": "Apply updates per vendor instructions.",
      "cisaVulnerabilityName": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability",
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.10240.19567\", \"matchCriteriaId\": \"D1B6D84B-3C19-443B-AC82-A2CBF2E91B85\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.14393.5501\", \"matchCriteriaId\": \"C4E7A8EB-F231-4358-B2F0-86CE298DCB32\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.17763.3650\", \"matchCriteriaId\": \"FD13C1A3-0D55-44B4-BCDA-3FE16F3FD0BB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.19042.2251\", \"matchCriteriaId\": \"53D74F18-E886-4BDD-BF98-6E3E7FDB416A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.19043.2251\", \"matchCriteriaId\": \"6CD19777-D4BC-4091-B5DF-196E3A5ECD41\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.19044.2251\", \"matchCriteriaId\": \"A22FD3BC-3283-49FD-89E7-120BD1BD5664\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.19045.2251\", \"matchCriteriaId\": \"71F26E89-0870-4C4A-81FE-F9F793A9E706\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.22000.1219\", \"matchCriteriaId\": \"701F768A-FE97-481C-87FE-53135E160DD8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.22621.819\", \"matchCriteriaId\": \"633EBB51-1843-47BD-8CA2-7A51EAF71B44\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:rt:*:*:*\", \"matchCriteriaId\": \"D01999BB-2CD6-4C84-A518-3A3BB78F1105\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F422A8C-2C4E-42C8-B420-E0728037E15C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\", \"matchCriteriaId\": \"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.14393.5501\", \"matchCriteriaId\": \"A5D182FC-6882-441A-994F-39721FD69EC2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.17763.3650\", \"matchCriteriaId\": \"BD54B434-65C1-414E-9498-67E871281112\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.20348.1249\", \"matchCriteriaId\": \"9883B9FF-9A73-4FAE-83C1-27CD9346ABED\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Windows Print Spooler Elevation of Privilege Vulnerability\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de elevaci\\u00f3n de privilegios en la Cola de Impresi\\u00f3n de Windows\"}]",
      "id": "CVE-2022-41073",
      "lastModified": "2025-01-02T22:15:22.443",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"secure@microsoft.com\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 5.9}]}",
      "published": "2022-11-09T22:15:21.207",
      "references": "[{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073\", \"source\": \"secure@microsoft.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]",
      "sourceIdentifier": "secure@microsoft.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-787\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-41073\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2022-11-09T22:15:21.207\",\"lastModified\":\"2025-10-30T19:25:43.020\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Windows Print Spooler Elevation of Privilege Vulnerability\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de elevaci\u00f3n de privilegios en la Cola de Impresi\u00f3n de Windows\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"cisaExploitAdd\":\"2022-11-08\",\"cisaActionDue\":\"2022-12-09\",\"cisaRequiredAction\":\"Apply updates per vendor instructions.\",\"cisaVulnerabilityName\":\"Microsoft Windows Print Spooler Privilege Escalation Vulnerability\",\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.10240.19567\",\"matchCriteriaId\":\"D1B6D84B-3C19-443B-AC82-A2CBF2E91B85\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.14393.5501\",\"matchCriteriaId\":\"C4E7A8EB-F231-4358-B2F0-86CE298DCB32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.17763.3650\",\"matchCriteriaId\":\"FD13C1A3-0D55-44B4-BCDA-3FE16F3FD0BB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.19042.2251\",\"matchCriteriaId\":\"53D74F18-E886-4BDD-BF98-6E3E7FDB416A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.19043.2251\",\"matchCriteriaId\":\"6CD19777-D4BC-4091-B5DF-196E3A5ECD41\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.19044.2251\",\"matchCriteriaId\":\"A22FD3BC-3283-49FD-89E7-120BD1BD5664\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.19045.2251\",\"matchCriteriaId\":\"71F26E89-0870-4C4A-81FE-F9F793A9E706\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.22000.1219\",\"matchCriteriaId\":\"701F768A-FE97-481C-87FE-53135E160DD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.22621.819\",\"matchCriteriaId\":\"633EBB51-1843-47BD-8CA2-7A51EAF71B44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:rt:*:*:*\",\"matchCriteriaId\":\"D01999BB-2CD6-4C84-A518-3A3BB78F1105\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F422A8C-2C4E-42C8-B420-E0728037E15C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.14393.5501\",\"matchCriteriaId\":\"A5D182FC-6882-441A-994F-39721FD69EC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.17763.3650\",\"matchCriteriaId\":\"BD54B434-65C1-414E-9498-67E871281112\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.20348.1249\",\"matchCriteriaId\":\"9883B9FF-9A73-4FAE-83C1-27CD9346ABED\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41073\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073\", \"name\": \"Windows Print Spooler Elevation of Privilege Vulnerability\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-03T12:35:49.109Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-41073\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2023-12-22T05:00:59.020458Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2022-11-08\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41073\"}}}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2022-11-08T00:00:00.000Z\", \"value\": \"CVE-2022-41073 added to CISA KEV\"}], \"references\": [{\"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41073\", \"tags\": [\"government-resource\"]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787 Out-of-bounds Write\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-04T14:11:41.859Z\"}}], \"cna\": {\"title\": \"Windows Print Spooler Elevation of Privilege Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1809\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.3650\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1809\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.0\", \"lessThan\": \"10.0.17763.3650\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2019\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.3650\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2019 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.3650\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 21H1\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.0\", \"lessThan\": \"10.0.19043.2251\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\", \"ARM64-based Systems\", \"32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2022\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.20348.0\", \"lessThan\": \"10.0.20348.1249\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 20H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.0\", \"lessThan\": \"10.0.19042.2251\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"ARM64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 21H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.0\", \"lessThan\": \"10.0.22000.1219\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\", \"ARM64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 21H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.19043.0\", \"lessThan\": \"10.0.19044.2251\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 22H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22621.0\", \"lessThan\": \"10.0.22621.819\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 22H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.19045.0\", \"lessThan\": \"10.0.19045.2251\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\", \"ARM64-based Systems\", \"32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1507\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.10240.0\", \"lessThan\": \"10.0.10240.19567\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1607\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.5501\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2016\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.5501\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2016 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.5501\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 7\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.1.0\", \"lessThan\": \"6.1.7601.26221\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 7 Service Pack 1\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.1.0\", \"lessThan\": \"6.1.7601.26221\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 8.1\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.3.0\", \"lessThan\": \"6.3.9600.20671\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\", \"ARM64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 Service Pack 2\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.21768\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 Service Pack 2 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.21768\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008  Service Pack 2\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.21768\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 R2 Service Pack 1\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.1.7601.0\", \"lessThan\": \"6.1.7601.26221\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.1.7601.0\", \"lessThan\": \"6.1.7601.26221\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.2.9200.0\", \"lessThan\": \"6.2.9200.23968\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.2.9200.0\", \"lessThan\": \"6.2.9200.23968\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 R2\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.3.9600.0\", \"lessThan\": \"6.3.9600.20671\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 R2 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.3.9600.0\", \"lessThan\": \"6.3.9600.20671\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}], \"datePublic\": \"2022-11-08T08:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073\", \"name\": \"Windows Print Spooler Elevation of Privilege Vulnerability\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Windows Print Spooler Elevation of Privilege Vulnerability\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"Impact\", \"description\": \"Elevation of Privilege\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.3650\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.3650\", \"versionStartIncluding\": \"10.0.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.3650\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.3650\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_21H1:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.19043.2251\", \"versionStartIncluding\": \"10.0.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.20348.1249\", \"versionStartIncluding\": \"10.0.20348.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.19042.2251\", \"versionStartIncluding\": \"10.0.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22000.1219\", \"versionStartIncluding\": \"10.0.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.19044.2251\", \"versionStartIncluding\": \"10.0.19043.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22621.819\", \"versionStartIncluding\": \"10.0.22621.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.19045.2251\", \"versionStartIncluding\": \"10.0.19045.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.10240.19567\", \"versionStartIncluding\": \"10.0.10240.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.5501\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.5501\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.5501\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.7601.26221\", \"versionStartIncluding\": \"6.1.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.7601.26221\", \"versionStartIncluding\": \"6.1.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.3.9600.20671\", \"versionStartIncluding\": \"6.3.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.6003.21768\", \"versionStartIncluding\": \"6.0.6003.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.6003.21768\", \"versionStartIncluding\": \"6.0.6003.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.6003.21768\", \"versionStartIncluding\": \"6.0.6003.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.7601.26221\", \"versionStartIncluding\": \"6.1.7601.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.7601.26221\", \"versionStartIncluding\": \"6.1.7601.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.2.9200.23968\", \"versionStartIncluding\": \"6.2.9200.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.2.9200.23968\", \"versionStartIncluding\": \"6.2.9200.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.3.9600.20671\", \"versionStartIncluding\": \"6.3.9600.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.3.9600.20671\", \"versionStartIncluding\": \"6.3.9600.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2025-01-02T21:31:55.267Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2022-41073\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-10-21T23:15:32.100Z\", \"dateReserved\": \"2022-09-19T00:00:00.000Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2022-11-09T00:00:00.000Z\", \"assignerShortName\": \"microsoft\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2022-AVI-1012

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Microsoft Windows. Elles permettent à un attaquant de provoquer une exécution de code à distance, une élévation de privilèges, un contournement de la fonctionnalité de sécurité, une atteinte à la confidentialité des données et un déni de service.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes 32 bits
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes x64
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes ARM64
Microsoft	Windows	Windows 8.1 pour systèmes 32 bits
Microsoft	Windows	Windows Subsystem pour Linux (WSL2)
Microsoft	Windows	Windows Sysmon
Microsoft	Windows	Windows 10 Version 20H2 pour systèmes ARM64
Microsoft	Windows	Windows Server 2012 R2
Microsoft	Windows	Windows Server 2012
Microsoft	Windows	Windows Server 2012 (Server Core installation)
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes 32 bits
Microsoft	Windows	Windows 10 Version 1607 pour systèmes 32 bits
Microsoft	Windows	Windows Server 2022 (Server Core installation)
Microsoft	Windows	Windows Server 2016 (Server Core installation)
Microsoft	Windows	Windows 7 pour systèmes 32 bits Service Pack 1
Microsoft	Windows	Windows 10 Version 1809 pour systèmes x64
Microsoft	Windows	Windows 10 Version 21H1 pour systèmes ARM64
Microsoft	Windows	Windows 11 pour systèmes ARM64
Microsoft	Windows	Windows 10 pour systèmes x64
Microsoft	Windows	Windows RT 8.1
Microsoft	Windows	Windows Server 2019 (Server Core installation)
Microsoft	Windows	Windows 11 Version 22H2 pour systèmes ARM64
Microsoft	Windows	Windows Server 2012 R2 (Server Core installation)
Microsoft	Windows	Windows 10 Version 20H2 pour systèmes x64
Microsoft	Windows	Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation)
Microsoft	Windows	Windows Server 2016
Microsoft	Windows	Windows 10 Version 21H1 pour systèmes 32 bits
Microsoft	Windows	Windows 10 Version 20H2 pour systèmes 32 bits
Microsoft	Windows	Windows 11 Version 22H2 pour systèmes x64
Microsoft	Windows	Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation)
Microsoft	Windows	Windows 11 pour systèmes x64
Microsoft	Windows	Windows 7 pour systèmes x64 Service Pack 1
Microsoft	Windows	Windows Server 2019
Microsoft	Windows	Windows 10 Version 21H1 pour systèmes x64
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes x64
Microsoft	Windows	Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation)
Microsoft	Windows	Windows 8.1 pour systèmes x64
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes ARM64
Microsoft	Windows	Windows Server 2008 R2 pour systèmes x64 Service Pack 1
Microsoft	Windows	Windows 10 Version 1809 pour systèmes ARM64
Microsoft	Windows	Windows 10 Version 1607 pour systèmes x64
Microsoft	Windows	Windows Server 2008 pour systèmes x64 Service Pack 2
Microsoft	Windows	Windows Server 2022
Microsoft	Windows	Windows Server 2008 pour systèmes 32 bits Service Pack 2
Microsoft	Windows	Windows 10 Version 1809 pour systèmes 32 bits
Microsoft	Windows	Windows 10 pour systèmes 32 bits

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft du 08 novembre 2022	None	vendor-advisory
Bulletin de sécurité Microsoft CVE-2022-41045 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41128 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41090 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-37992 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-37967 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41057 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-38023 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41058 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41047 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41055 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41054 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41039 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-23824 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41053 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41099 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41097 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41073 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41095 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41125 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-38014 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41056 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-37966 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41100 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41088 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41086 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41049 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-38015 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41048 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41050 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41052 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41102 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41098 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41116 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41120 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41096 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41114 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41092 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41101 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41093 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41044 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41109 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41118 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41113 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41091 du 08 novembre 2022	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 22H2 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 8.1 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Subsystem pour Linux (WSL2)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Sysmon",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 20H2 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 7 pour syst\u00e8mes 32 bits Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H1 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows RT 8.1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 22H2 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 20H2 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H1 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 20H2 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 22H2 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 7 pour syst\u00e8mes x64 Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H1 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 8.1 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-41128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41128"
    },
    {
      "name": "CVE-2022-38014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38014"
    },
    {
      "name": "CVE-2022-41039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41039"
    },
    {
      "name": "CVE-2022-41086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41086"
    },
    {
      "name": "CVE-2022-41056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41056"
    },
    {
      "name": "CVE-2022-41045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41045"
    },
    {
      "name": "CVE-2022-41057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41057"
    },
    {
      "name": "CVE-2022-41058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41058"
    },
    {
      "name": "CVE-2022-41052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41052"
    },
    {
      "name": "CVE-2022-41054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41054"
    },
    {
      "name": "CVE-2022-41053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41053"
    },
    {
      "name": "CVE-2022-37967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37967"
    },
    {
      "name": "CVE-2022-41109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41109"
    },
    {
      "name": "CVE-2022-41048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41048"
    },
    {
      "name": "CVE-2022-41120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41120"
    },
    {
      "name": "CVE-2022-41090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41090"
    },
    {
      "name": "CVE-2022-41044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41044"
    },
    {
      "name": "CVE-2022-41049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41049"
    },
    {
      "name": "CVE-2022-23824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23824"
    },
    {
      "name": "CVE-2022-41091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41091"
    },
    {
      "name": "CVE-2022-41096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41096"
    },
    {
      "name": "CVE-2022-41113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41113"
    },
    {
      "name": "CVE-2022-41102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41102"
    },
    {
      "name": "CVE-2022-38023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38023"
    },
    {
      "name": "CVE-2022-41098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41098"
    },
    {
      "name": "CVE-2022-41101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41101"
    },
    {
      "name": "CVE-2022-41092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41092"
    },
    {
      "name": "CVE-2022-41073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41073"
    },
    {
      "name": "CVE-2022-41050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41050"
    },
    {
      "name": "CVE-2022-41099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41099"
    },
    {
      "name": "CVE-2022-41047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41047"
    },
    {
      "name": "CVE-2022-41095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41095"
    },
    {
      "name": "CVE-2022-38015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38015"
    },
    {
      "name": "CVE-2022-41116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41116"
    },
    {
      "name": "CVE-2022-41118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41118"
    },
    {
      "name": "CVE-2022-41100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41100"
    },
    {
      "name": "CVE-2022-41125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41125"
    },
    {
      "name": "CVE-2022-37992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37992"
    },
    {
      "name": "CVE-2022-41114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41114"
    },
    {
      "name": "CVE-2022-37966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37966"
    },
    {
      "name": "CVE-2022-41088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41088"
    },
    {
      "name": "CVE-2022-41055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41055"
    },
    {
      "name": "CVE-2022-41097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41097"
    },
    {
      "name": "CVE-2022-41093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41093"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41045 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41045"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41128 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41128"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41090 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41090"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37992 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37992"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37967 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37967"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41057 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41057"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38023 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38023"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41058 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41058"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41047 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41047"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41055 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41055"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41054 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41054"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41039 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41039"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-23824 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23824"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41053 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41053"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41099 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41097 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41097"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41073 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41095 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41095"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41125 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41125"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38014 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38014"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41056 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41056"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37966 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37966"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41100 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41100"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41088 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41088"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41086 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41086"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41049 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41049"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38015 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38015"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41048 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41048"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41050 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41050"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41052 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41052"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41102 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41102"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41098 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41098"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41116 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41116"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41120 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41120"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41096 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41096"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41114 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41114"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41092 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41092"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41101 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41101"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41093 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41093"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41044 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41044"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41109 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41109"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41118 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41118"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41113 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41113"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41091 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41091"
    }
  ],
  "reference": "CERTFR-2022-AVI-1012",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-11-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Windows\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer une ex\u00e9cution de code \u00e0 distance, une \u00e9l\u00e9vation de\nprivil\u00e8ges, un contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9, une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/"
    }
  ]
}

CERTFR-2022-AVI-1014

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Microsoft Azure. Elles permettent à un attaquant de provoquer une exécution de code à distance, une élévation de privilèges, un contournement de la fonctionnalité de sécurité, une atteinte à la confidentialité des données et un déni de service.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	Azure	Azure EFLOW
Microsoft	Azure	Azure CycleCloud 7
Microsoft	Azure	Azure RTOS GUIX Studio
Microsoft	Azure	Windows Server 2022 Datacenter: Azure Edition (Hotpatch)
Microsoft	Azure	Azure CycleCloud 8
Microsoft	Azure	Azure CLI

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft du 08 novembre 2022	None	vendor-advisory
Bulletin de sécurité Microsoft CVE-2022-41045 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41090 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-37992 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41057 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41058 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41047 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41055 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41054 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41039 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41051 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41053 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41097 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41085 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41073 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41125 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-38014 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41056 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41100 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-39327 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41088 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41086 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41049 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-38015 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41048 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41050 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41102 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41098 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41114 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41092 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41101 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41093 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41109 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41113 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41091 du 08 novembre 2022	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Azure EFLOW",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure CycleCloud 7",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure RTOS GUIX Studio",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022 Datacenter: Azure Edition (Hotpatch)",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure CycleCloud 8",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure CLI",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-38014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38014"
    },
    {
      "name": "CVE-2022-41039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41039"
    },
    {
      "name": "CVE-2022-41086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41086"
    },
    {
      "name": "CVE-2022-41056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41056"
    },
    {
      "name": "CVE-2022-41045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41045"
    },
    {
      "name": "CVE-2022-41057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41057"
    },
    {
      "name": "CVE-2022-41058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41058"
    },
    {
      "name": "CVE-2022-41054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41054"
    },
    {
      "name": "CVE-2022-41053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41053"
    },
    {
      "name": "CVE-2022-41109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41109"
    },
    {
      "name": "CVE-2022-41048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41048"
    },
    {
      "name": "CVE-2022-41090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41090"
    },
    {
      "name": "CVE-2022-41085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41085"
    },
    {
      "name": "CVE-2022-41049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41049"
    },
    {
      "name": "CVE-2022-41091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41091"
    },
    {
      "name": "CVE-2022-41051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41051"
    },
    {
      "name": "CVE-2022-41113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41113"
    },
    {
      "name": "CVE-2022-41102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41102"
    },
    {
      "name": "CVE-2022-41098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41098"
    },
    {
      "name": "CVE-2022-41101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41101"
    },
    {
      "name": "CVE-2022-41092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41092"
    },
    {
      "name": "CVE-2022-41073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41073"
    },
    {
      "name": "CVE-2022-41050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41050"
    },
    {
      "name": "CVE-2022-39327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-39327"
    },
    {
      "name": "CVE-2022-41047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41047"
    },
    {
      "name": "CVE-2022-38015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38015"
    },
    {
      "name": "CVE-2022-41100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41100"
    },
    {
      "name": "CVE-2022-41125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41125"
    },
    {
      "name": "CVE-2022-37992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37992"
    },
    {
      "name": "CVE-2022-41114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41114"
    },
    {
      "name": "CVE-2022-41088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41088"
    },
    {
      "name": "CVE-2022-41055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41055"
    },
    {
      "name": "CVE-2022-41097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41097"
    },
    {
      "name": "CVE-2022-41093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41093"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41045 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41045"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41090 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41090"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37992 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37992"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41057 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41057"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41058 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41058"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41047 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41047"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41055 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41055"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41054 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41054"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41039 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41039"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41051 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41051"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41053 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41053"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41097 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41097"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41085 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41085"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41073 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41125 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41125"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38014 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38014"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41056 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41056"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41100 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41100"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-39327 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-39327"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41088 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41088"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41086 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41086"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41049 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41049"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38015 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38015"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41048 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41048"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41050 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41050"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41102 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41102"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41098 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41098"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41114 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41114"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41092 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41092"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41101 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41101"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41093 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41093"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41109 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41109"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41113 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41113"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41091 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41091"
    }
  ],
  "reference": "CERTFR-2022-AVI-1014",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-11-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Azure\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer une ex\u00e9cution de code \u00e0 distance, une \u00e9l\u00e9vation de\nprivil\u00e8ges, un contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9, une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Azure",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/"
    }
  ]
}

CERTFR-2022-AVI-1012

Vulnerability from certfr_avis - Published: - Updated:

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes 32 bits
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes x64
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes ARM64
Microsoft	Windows	Windows 8.1 pour systèmes 32 bits
Microsoft	Windows	Windows Subsystem pour Linux (WSL2)
Microsoft	Windows	Windows Sysmon
Microsoft	Windows	Windows 10 Version 20H2 pour systèmes ARM64
Microsoft	Windows	Windows Server 2012 R2
Microsoft	Windows	Windows Server 2012
Microsoft	Windows	Windows Server 2012 (Server Core installation)
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes 32 bits
Microsoft	Windows	Windows 10 Version 1607 pour systèmes 32 bits
Microsoft	Windows	Windows Server 2022 (Server Core installation)
Microsoft	Windows	Windows Server 2016 (Server Core installation)
Microsoft	Windows	Windows 7 pour systèmes 32 bits Service Pack 1
Microsoft	Windows	Windows 10 Version 1809 pour systèmes x64
Microsoft	Windows	Windows 10 Version 21H1 pour systèmes ARM64
Microsoft	Windows	Windows 11 pour systèmes ARM64
Microsoft	Windows	Windows 10 pour systèmes x64
Microsoft	Windows	Windows RT 8.1
Microsoft	Windows	Windows Server 2019 (Server Core installation)
Microsoft	Windows	Windows 11 Version 22H2 pour systèmes ARM64
Microsoft	Windows	Windows Server 2012 R2 (Server Core installation)
Microsoft	Windows	Windows 10 Version 20H2 pour systèmes x64
Microsoft	Windows	Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation)
Microsoft	Windows	Windows Server 2016
Microsoft	Windows	Windows 10 Version 21H1 pour systèmes 32 bits
Microsoft	Windows	Windows 10 Version 20H2 pour systèmes 32 bits
Microsoft	Windows	Windows 11 Version 22H2 pour systèmes x64
Microsoft	Windows	Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation)
Microsoft	Windows	Windows 11 pour systèmes x64
Microsoft	Windows	Windows 7 pour systèmes x64 Service Pack 1
Microsoft	Windows	Windows Server 2019
Microsoft	Windows	Windows 10 Version 21H1 pour systèmes x64
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes x64
Microsoft	Windows	Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation)
Microsoft	Windows	Windows 8.1 pour systèmes x64
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes ARM64
Microsoft	Windows	Windows Server 2008 R2 pour systèmes x64 Service Pack 1
Microsoft	Windows	Windows 10 Version 1809 pour systèmes ARM64
Microsoft	Windows	Windows 10 Version 1607 pour systèmes x64
Microsoft	Windows	Windows Server 2008 pour systèmes x64 Service Pack 2
Microsoft	Windows	Windows Server 2022
Microsoft	Windows	Windows Server 2008 pour systèmes 32 bits Service Pack 2
Microsoft	Windows	Windows 10 Version 1809 pour systèmes 32 bits
Microsoft	Windows	Windows 10 pour systèmes 32 bits

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft du 08 novembre 2022	None	vendor-advisory
Bulletin de sécurité Microsoft CVE-2022-41045 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41128 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41090 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-37992 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-37967 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41057 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-38023 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41058 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41047 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41055 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41054 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41039 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-23824 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41053 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41099 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41097 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41073 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41095 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41125 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-38014 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41056 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-37966 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41100 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41088 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41086 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41049 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-38015 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41048 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41050 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41052 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41102 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41098 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41116 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41120 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41096 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41114 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41092 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41101 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41093 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41044 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41109 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41118 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41113 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41091 du 08 novembre 2022	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 22H2 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 8.1 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Subsystem pour Linux (WSL2)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Sysmon",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 20H2 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 7 pour syst\u00e8mes 32 bits Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H1 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows RT 8.1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 22H2 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 20H2 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H1 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 20H2 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 22H2 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 7 pour syst\u00e8mes x64 Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H1 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 8.1 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes ARM64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-41128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41128"
    },
    {
      "name": "CVE-2022-38014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38014"
    },
    {
      "name": "CVE-2022-41039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41039"
    },
    {
      "name": "CVE-2022-41086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41086"
    },
    {
      "name": "CVE-2022-41056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41056"
    },
    {
      "name": "CVE-2022-41045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41045"
    },
    {
      "name": "CVE-2022-41057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41057"
    },
    {
      "name": "CVE-2022-41058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41058"
    },
    {
      "name": "CVE-2022-41052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41052"
    },
    {
      "name": "CVE-2022-41054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41054"
    },
    {
      "name": "CVE-2022-41053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41053"
    },
    {
      "name": "CVE-2022-37967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37967"
    },
    {
      "name": "CVE-2022-41109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41109"
    },
    {
      "name": "CVE-2022-41048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41048"
    },
    {
      "name": "CVE-2022-41120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41120"
    },
    {
      "name": "CVE-2022-41090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41090"
    },
    {
      "name": "CVE-2022-41044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41044"
    },
    {
      "name": "CVE-2022-41049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41049"
    },
    {
      "name": "CVE-2022-23824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23824"
    },
    {
      "name": "CVE-2022-41091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41091"
    },
    {
      "name": "CVE-2022-41096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41096"
    },
    {
      "name": "CVE-2022-41113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41113"
    },
    {
      "name": "CVE-2022-41102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41102"
    },
    {
      "name": "CVE-2022-38023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38023"
    },
    {
      "name": "CVE-2022-41098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41098"
    },
    {
      "name": "CVE-2022-41101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41101"
    },
    {
      "name": "CVE-2022-41092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41092"
    },
    {
      "name": "CVE-2022-41073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41073"
    },
    {
      "name": "CVE-2022-41050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41050"
    },
    {
      "name": "CVE-2022-41099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41099"
    },
    {
      "name": "CVE-2022-41047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41047"
    },
    {
      "name": "CVE-2022-41095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41095"
    },
    {
      "name": "CVE-2022-38015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38015"
    },
    {
      "name": "CVE-2022-41116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41116"
    },
    {
      "name": "CVE-2022-41118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41118"
    },
    {
      "name": "CVE-2022-41100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41100"
    },
    {
      "name": "CVE-2022-41125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41125"
    },
    {
      "name": "CVE-2022-37992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37992"
    },
    {
      "name": "CVE-2022-41114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41114"
    },
    {
      "name": "CVE-2022-37966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37966"
    },
    {
      "name": "CVE-2022-41088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41088"
    },
    {
      "name": "CVE-2022-41055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41055"
    },
    {
      "name": "CVE-2022-41097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41097"
    },
    {
      "name": "CVE-2022-41093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41093"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41045 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41045"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41128 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41128"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41090 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41090"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37992 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37992"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37967 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37967"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41057 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41057"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38023 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38023"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41058 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41058"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41047 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41047"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41055 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41055"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41054 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41054"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41039 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41039"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-23824 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23824"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41053 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41053"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41099 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41097 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41097"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41073 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41095 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41095"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41125 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41125"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38014 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38014"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41056 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41056"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37966 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37966"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41100 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41100"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41088 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41088"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41086 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41086"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41049 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41049"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38015 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38015"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41048 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41048"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41050 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41050"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41052 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41052"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41102 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41102"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41098 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41098"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41116 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41116"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41120 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41120"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41096 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41096"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41114 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41114"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41092 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41092"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41101 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41101"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41093 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41093"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41044 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41044"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41109 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41109"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41118 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41118"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41113 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41113"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41091 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41091"
    }
  ],
  "reference": "CERTFR-2022-AVI-1012",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-11-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Windows\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer une ex\u00e9cution de code \u00e0 distance, une \u00e9l\u00e9vation de\nprivil\u00e8ges, un contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9, une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/"
    }
  ]
}

CERTFR-2022-AVI-1014

Vulnerability from certfr_avis - Published: - Updated:

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	Azure	Azure EFLOW
Microsoft	Azure	Azure CycleCloud 7
Microsoft	Azure	Azure RTOS GUIX Studio
Microsoft	Azure	Windows Server 2022 Datacenter: Azure Edition (Hotpatch)
Microsoft	Azure	Azure CycleCloud 8
Microsoft	Azure	Azure CLI

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft du 08 novembre 2022	None	vendor-advisory
Bulletin de sécurité Microsoft CVE-2022-41045 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41090 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-37992 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41057 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41058 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41047 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41055 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41054 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41039 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41051 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41053 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41097 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41085 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41073 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41125 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-38014 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41056 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41100 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-39327 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41088 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41086 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41049 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-38015 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41048 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41050 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41102 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41098 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41114 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41092 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41101 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41093 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41109 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41113 du 08 novembre 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-41091 du 08 novembre 2022	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Azure EFLOW",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure CycleCloud 7",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure RTOS GUIX Studio",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022 Datacenter: Azure Edition (Hotpatch)",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure CycleCloud 8",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure CLI",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-38014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38014"
    },
    {
      "name": "CVE-2022-41039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41039"
    },
    {
      "name": "CVE-2022-41086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41086"
    },
    {
      "name": "CVE-2022-41056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41056"
    },
    {
      "name": "CVE-2022-41045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41045"
    },
    {
      "name": "CVE-2022-41057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41057"
    },
    {
      "name": "CVE-2022-41058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41058"
    },
    {
      "name": "CVE-2022-41054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41054"
    },
    {
      "name": "CVE-2022-41053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41053"
    },
    {
      "name": "CVE-2022-41109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41109"
    },
    {
      "name": "CVE-2022-41048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41048"
    },
    {
      "name": "CVE-2022-41090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41090"
    },
    {
      "name": "CVE-2022-41085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41085"
    },
    {
      "name": "CVE-2022-41049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41049"
    },
    {
      "name": "CVE-2022-41091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41091"
    },
    {
      "name": "CVE-2022-41051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41051"
    },
    {
      "name": "CVE-2022-41113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41113"
    },
    {
      "name": "CVE-2022-41102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41102"
    },
    {
      "name": "CVE-2022-41098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41098"
    },
    {
      "name": "CVE-2022-41101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41101"
    },
    {
      "name": "CVE-2022-41092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41092"
    },
    {
      "name": "CVE-2022-41073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41073"
    },
    {
      "name": "CVE-2022-41050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41050"
    },
    {
      "name": "CVE-2022-39327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-39327"
    },
    {
      "name": "CVE-2022-41047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41047"
    },
    {
      "name": "CVE-2022-38015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38015"
    },
    {
      "name": "CVE-2022-41100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41100"
    },
    {
      "name": "CVE-2022-41125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41125"
    },
    {
      "name": "CVE-2022-37992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37992"
    },
    {
      "name": "CVE-2022-41114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41114"
    },
    {
      "name": "CVE-2022-41088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41088"
    },
    {
      "name": "CVE-2022-41055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41055"
    },
    {
      "name": "CVE-2022-41097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41097"
    },
    {
      "name": "CVE-2022-41093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41093"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41045 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41045"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41090 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41090"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-37992 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37992"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41057 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41057"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41058 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41058"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41047 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41047"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41055 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41055"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41054 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41054"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41039 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41039"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41051 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41051"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41053 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41053"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41097 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41097"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41085 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41085"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41073 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41125 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41125"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38014 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38014"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41056 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41056"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41100 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41100"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-39327 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-39327"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41088 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41088"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41086 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41086"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41049 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41049"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-38015 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38015"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41048 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41048"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41050 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41050"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41102 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41102"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41098 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41098"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41114 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41114"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41092 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41092"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41101 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41101"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41093 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41093"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41109 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41109"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41113 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41113"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-41091 du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41091"
    }
  ],
  "reference": "CERTFR-2022-AVI-1014",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-11-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Azure\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer une ex\u00e9cution de code \u00e0 distance, une \u00e9l\u00e9vation de\nprivil\u00e8ges, un contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9, une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Azure",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 08 novembre 2022",
      "url": "https://msrc.microsoft.com/update-guide/"
    }
  ]
}

BDU:2022-06707

Vulnerability from fstec - Published: 11.10.2022

Title

Уязвимость диспетчера очереди печати Windows Print Spooler операционных систем Windows, позволяющая нарушителю выполнить произвольный код

Description

Уязвимость диспетчера очереди печати Windows Print Spooler операционных систем Windows связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Severity


                    
                      AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vendor

Microsoft Corp

Software Name

Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2008 R2 Service Pack 1, Windows 10, Windows 10 1607, Windows Server 2016, Windows RT 8.1, Windows Server 2008 Service Pack 2 (Server Core Installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2016 (Server Core installation), Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows 10 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 20H2, Windows 10 21H1, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 11, Windows 10 21H2, Windows 11 22H2, Windows 10 22H2, Windows Server 2012 (Server Core installation)

Software Version

- (Windows 7 Service Pack 1), - (Windows Server 2008 Service Pack 2), - (Windows 8.1), - (Windows Server 2012), - (Windows Server 2012 R2), - (Windows Server 2008 R2 Service Pack 1), - (Windows 10), - (Windows 10 1607), - (Windows Server 2016), - (Windows RT 8.1), - (Windows Server 2008 Service Pack 2 (Server Core Installation)), - (Windows Server 2012 R2 (Server Core installation)), - (Windows Server 2016 (Server Core installation)), - (Windows Server 2008 R2 Service Pack 1 (Server Core installation)), - (Windows 10 1809), - (Windows Server 2019), - (Windows Server 2019 (Server Core installation)), - (Windows 10 20H2), - (Windows 10 21H1), - (Windows Server 2022), - (Windows Server 2022 (Server Core installation)), - (Windows 11), - (Windows 10 21H2), - (Windows 11 22H2), - (Windows 10 22H2), - (Windows Server 2012 (Server Core installation))

Possible Mitigations

Установка обновлений из доверенных источников. В связи со сложившейся обстановкой и введенными санкциями против Российской Федерации рекомендуется устанавливать обновления программного обеспечения только после оценки всех сопутствующих рисков. Компенсирующие меры: - использование антивирусных средств для детектирования и нейтрализации программ, эксплуатирующих уязвимость; - использование механизмов замкнутой программной среды; - отключение неиспользуемых учетных записей, а также учетных записей недоверенных пользователей; - принудительная смена паролей пользователей; - ограничение доступа к командной строке для недоверенных пользователей; - мониторинг действий пользователей. Использование рекомендаций производителя: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41073

Reference

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41073 https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv

CWE

CWE-119

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO10, TO11, TO12, TO18, TO19, TO20, TO46",
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO10 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 10 20H2 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x64, 2022 11 (KB5019959), TO11 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 10 1809 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x64, 2022 11 (KB5019966), TO12 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 11 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x64, 2022 11 (KB5019961), TO18 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 10 21H2 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x64, 2022 11 (KB5019959), TO19 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 10 21H2 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x86, 2022 11 (KB5019959), TO20 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 10 22H2 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x64, 2022 11 (KB5019959), TO46 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 11 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x64, 2022 11 (KB5019961)",
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Windows 7 Service Pack 1), - (Windows Server 2008 Service Pack 2), - (Windows 8.1), - (Windows Server 2012), - (Windows Server 2012 R2), - (Windows Server 2008 R2 Service Pack 1), - (Windows 10), - (Windows 10 1607), - (Windows Server 2016), - (Windows RT 8.1), - (Windows Server 2008 Service Pack 2 (Server Core Installation)), - (Windows Server 2012 R2 (Server Core installation)), - (Windows Server 2016 (Server Core installation)), - (Windows Server 2008 R2 Service Pack 1 (Server Core installation)), - (Windows 10 1809), - (Windows Server 2019), - (Windows Server 2019 (Server Core installation)), - (Windows 10 20H2), - (Windows 10 21H1), - (Windows Server 2022), - (Windows Server 2022 (Server Core installation)), - (Windows 11), - (Windows 10 21H2), - (Windows 11 22H2), - (Windows 10 22H2), - (Windows Server 2012 (Server Core installation))",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0434\u043b\u044f \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u043c\u043a\u043d\u0443\u0442\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0441\u043c\u0435\u043d\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u0434\u043b\u044f \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41073",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "11.10.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "24.09.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "11.11.2022",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-06707",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2022-41073",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2008 R2 Service Pack 1, Windows 10, Windows 10 1607, Windows Server 2016, Windows RT 8.1, Windows Server 2008 Service Pack 2 (Server Core Installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2016 (Server Core installation), Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows 10 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 20H2, Windows 10 21H1, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 11, Windows 10 21H2, Windows 11 22H2, Windows 10 22H2, Windows Server 2012 (Server Core installation)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Microsoft Corp Windows 7 Service Pack 1 - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 32-bit, Microsoft Corp Windows 7 Service Pack 1 - 32-bit, Microsoft Corp Windows 8.1 - 64-bit, Microsoft Corp Windows 8.1 - 32-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 64-bit, Microsoft Corp Windows Server 2012 - , Microsoft Corp Windows Server 2012 R2 - , Microsoft Corp Windows Server 2012 R2 - 64-bit, Microsoft Corp Windows Server 2008 R2 Service Pack 1 - 64-bit, Microsoft Corp Windows 10 - 64-bit, Microsoft Corp Windows 10 - 32-bit, Microsoft Corp Windows 10 1607 - 64-bit, Microsoft Corp Windows 10 1607 - 32-bit, Microsoft Corp Windows Server 2016 - , Microsoft Corp Windows RT 8.1 - , Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 32-bit, Microsoft Corp Windows Server 2012 R2 (Server Core installation) - , Microsoft Corp Windows Server 2016 (Server Core installation) - , Microsoft Corp Windows Server 2008 R2 Service Pack 1 (Server Core installation) - 64-bit, Microsoft Corp Windows 10 1809 - 64-bit, Microsoft Corp Windows 10 1809 - 32-bit, Microsoft Corp Windows Server 2019 - , Microsoft Corp Windows Server 2019 (Server Core installation) - , Microsoft Corp Windows 10 1809 - ARM64, Microsoft Corp Windows 10 20H2 - ARM64, Microsoft Corp Windows 10 20H2 - 32-bit, Microsoft Corp Windows 10 20H2 - 64-bit, Microsoft Corp Windows 10 21H1 - 32-bit, Microsoft Corp Windows 10 21H1 - 64-bit, Microsoft Corp Windows 10 21H1 - ARM64, Microsoft Corp Windows Server 2022 - , Microsoft Corp Windows Server 2022 (Server Core installation) - , Microsoft Corp Windows 11 - 64-bit, Microsoft Corp Windows 11 - ARM64, Microsoft Corp Windows 10 21H2 - 64-bit, Microsoft Corp Windows 10 21H2 - 32-bit, Microsoft Corp Windows 10 21H2 - ARM64, Microsoft Corp Windows 11 22H2 - 64-bit, Microsoft Corp Windows 11 22H2 - ARM64, Microsoft Corp Windows 10 22H2 - 64-bit, Microsoft Corp Windows 10 22H2 - ARM64, Microsoft Corp Windows 10 22H2 - 32-bit, Microsoft Corp Windows Server 2012 (Server Core installation) - ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438 Windows Print Spooler \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438 Windows Print Spooler \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41073\nhttps://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

FKIE_CVE-2022-41073

Vulnerability from fkie_nvd - Published: 2022-11-09 22:15 - Updated: 2026-06-17 05:02

CISA KEV KEVintel KEV

Severity

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

Windows Print Spooler Elevation of Privilege Vulnerability

References

URL	Tags
secure@microsoft.com	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073	Patch, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41073	US Government Resource

Impacted products

Vendor	Product	Version
microsoft	windows_10_1507	*
microsoft	windows_10_1607	*
microsoft	windows_10_1809	*
microsoft	windows_10_20h2	*
microsoft	windows_10_21h1	*
microsoft	windows_10_21h2	*
microsoft	windows_10_22h2	*
microsoft	windows_11_21h2	*
microsoft	windows_11_22h2	*
microsoft	windows_7	-
microsoft	windows_8.1	-
microsoft	windows_8.1	-
microsoft	windows_server_2008	-
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	-
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	*
microsoft	windows_server_2019	*
microsoft	windows_server_2022	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.3650",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.3650",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.3650",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.3650",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems",
            "32-bit Systems"
          ],
          "product": "Windows 10 Version 21H1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19043.2251",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.1249",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems"
          ],
          "product": "Windows 10 Version 20H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19042.2251",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22000.1219",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.2251",
              "status": "affected",
              "version": "10.0.19043.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.819",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems",
            "32-bit Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.2251",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1507",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10240.19567",
              "status": "affected",
              "version": "10.0.10240.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.5501",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.5501",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.5501",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems"
          ],
          "product": "Windows 7",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.26221",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 7 Service Pack 1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.26221",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "product": "Windows 8.1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.20671",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.21768",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.21768",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008  Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.21768",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.26221",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.26221",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.23968",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.23968",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.20671",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.20671",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "secure@microsoft.com"
    }
  ],
  "cisaActionDue": "2022-12-09",
  "cisaExploitAdd": "2022-11-08",
  "cisaRequiredAction": "Apply updates per vendor instructions.",
  "cisaVulnerabilityName": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1B6D84B-3C19-443B-AC82-A2CBF2E91B85",
              "versionEndExcluding": "10.0.10240.19567",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4E7A8EB-F231-4358-B2F0-86CE298DCB32",
              "versionEndExcluding": "10.0.14393.5501",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD13C1A3-0D55-44B4-BCDA-3FE16F3FD0BB",
              "versionEndExcluding": "10.0.17763.3650",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "53D74F18-E886-4BDD-BF98-6E3E7FDB416A",
              "versionEndExcluding": "10.0.19042.2251",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CD19777-D4BC-4091-B5DF-196E3A5ECD41",
              "versionEndExcluding": "10.0.19043.2251",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A22FD3BC-3283-49FD-89E7-120BD1BD5664",
              "versionEndExcluding": "10.0.19044.2251",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "71F26E89-0870-4C4A-81FE-F9F793A9E706",
              "versionEndExcluding": "10.0.19045.2251",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "701F768A-FE97-481C-87FE-53135E160DD8",
              "versionEndExcluding": "10.0.22000.1219",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "633EBB51-1843-47BD-8CA2-7A51EAF71B44",
              "versionEndExcluding": "10.0.22621.819",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:rt:*:*:*",
              "matchCriteriaId": "D01999BB-2CD6-4C84-A518-3A3BB78F1105",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
              "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5D182FC-6882-441A-994F-39721FD69EC2",
              "versionEndExcluding": "10.0.14393.5501",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD54B434-65C1-414E-9498-67E871281112",
              "versionEndExcluding": "10.0.17763.3650",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9883B9FF-9A73-4FAE-83C1-27CD9346ABED",
              "versionEndExcluding": "10.0.20348.1249",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Windows Print Spooler Elevation of Privilege Vulnerability"
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de elevaci\u00f3n de privilegios en la Cola de Impresi\u00f3n de Windows"
    }
  ],
  "id": "CVE-2022-41073",
  "lastModified": "2026-06-17T05:02:32.090",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "secure@microsoft.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-41073",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2023-12-22T05:00:59.020458Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2022-11-09T22:15:21.207",
  "references": [
    {
      "source": "secure@microsoft.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41073"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-6XMP-59J9-C5X2

Vulnerability from github – Published: 2022-11-10 12:01 – Updated: 2025-10-22 00:32

Details

Windows Print Spooler Elevation of Privilege Vulnerability.

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-41073"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-11-09T22:15:00Z",
    "severity": "HIGH"
  },
  "details": "Windows Print Spooler Elevation of Privilege Vulnerability.",
  "id": "GHSA-6xmp-59j9-c5x2",
  "modified": "2025-10-22T00:32:37Z",
  "published": "2022-11-10T12:01:08Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41073"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
    },
    {
      "type": "WEB",
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41073"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41073"
    },
    {
      "type": "WEB",
      "url": "https://www.secpod.com/blog/microsoft-november-2022-patch-tuesday-patches-65-vulnerabilities-including-6-zero-days"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2022-41073

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Windows Print Spooler Elevation of Privilege Vulnerability

Aliases

CVE-2022-41073

Aliases

CVE-2022-41073

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2022-41073",
    "id": "GSD-2022-41073"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-41073"
      ],
      "details": "Windows Print Spooler Elevation of Privilege Vulnerability",
      "id": "GSD-2022-41073",
      "modified": "2023-12-13T01:19:33.065915Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2022-41073",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Windows 10 Version 1809",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.17763.3650"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2019",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.17763.3650"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2019 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.17763.3650"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 21H1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.19043.2251"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2022",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.20348.1249"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 20H2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.19042.2251"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 11 version 21H2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.22000.1219"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 21H2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.19044.2251"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 11 version 22H2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.22621.819"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 22H2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.19045.2251"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 1507",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.10240.19567"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 1607",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.14393.5501"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2016",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.14393.5501"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2016 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.14393.5501"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 7",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.1.0",
                          "version_value": "6.1.7601.26221"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 7 Service Pack 1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.1.0",
                          "version_value": "6.1.7601.26221"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 8.1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.3.0",
                          "version_value": "6.3.9600.20671"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2008 Service Pack 2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.0.0",
                          "version_value": "6.0.6003.21768"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2008 Service Pack 2 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.0.0",
                          "version_value": "6.0.6003.21768"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2008  Service Pack 2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.0.0",
                          "version_value": "6.0.6003.21768"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2008 R2 Service Pack 1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.1.0",
                          "version_value": "6.1.7601.26221"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.0.0",
                          "version_value": "6.1.7601.26221"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2012",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.2.0",
                          "version_value": "6.2.9200.23968"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2012 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.2.0",
                          "version_value": "6.2.9200.23968"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2012 R2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.3.0",
                          "version_value": "6.3.9600.20671"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server 2012 R2 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.3.0",
                          "version_value": "6.3.9600.20671"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Microsoft"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Windows Print Spooler Elevation of Privilege Vulnerability"
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Elevation of Privilege"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073",
            "refsource": "MISC",
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
          },
          {
            "name": "http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:rt:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:datacenter\\:_azure:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2022-41073"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Windows Print Spooler Elevation of Privilege Vulnerability"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073",
              "refsource": "MISC",
              "tags": [],
              "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
            },
            {
              "name": "http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html",
              "refsource": "MISC",
              "tags": [],
              "url": "http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2023-09-06T21:15Z",
      "publishedDate": "2022-11-09T22:15Z"
    }
  }
}

MSRC_CVE-2022-41073

Vulnerability from csaf_microsoft - Published: 2022-11-08 08:00 - Updated: 2022-11-08 08:00

Summary

Windows Print Spooler Elevation of Privilege Vulnerability

Severity

Important

Notes

Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Customer Action: Required. The vulnerability documented by this CVE requires customer action to resolve.

CVE-2022-41073

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected products

Fixed 43 products

Product	Identifier	Version	Remediation
Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.21768 Windows Server 2008 for 32-bit Systems Service Pack 2		6.0.6003.21768
Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.21768 Windows Server 2008 for x64-based Systems Service Pack 2		6.0.6003.21768
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.21768 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)		6.0.6003.21768
Windows 7 for 32-bit Systems Service Pack 1 6.1.7601.26221 Windows 7 for 32-bit Systems Service Pack 1		6.1.7601.26221
Windows 7 for x64-based Systems Service Pack 1 6.1.7601.26221 Windows 7 for x64-based Systems Service Pack 1		6.1.7601.26221
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.26221 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)		6.1.7601.26221
Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.26221 Windows Server 2008 R2 for x64-based Systems Service Pack 1		6.1.7601.26221
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.21768 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)		6.0.6003.21768
Windows Server 2012 6.2.9200.23968 Windows Server 2012		6.2.9200.23968
Windows Server 2012 (Server Core installation) 6.2.9200.23968 Windows Server 2012 (Server Core installation)		6.2.9200.23968
Windows 8.1 for 32-bit systems 6.3.9600.20671 Windows 8.1 for 32-bit systems		6.3.9600.20671
Windows 8.1 for x64-based systems 6.3.9600.20671 Windows 8.1 for x64-based systems		6.3.9600.20671
Windows Server 2012 R2 6.3.9600.20671 Windows Server 2012 R2		6.3.9600.20671
Windows RT 8.1 6.3.9600.20670 Windows RT 8.1		6.3.9600.20670
Windows Server 2012 R2 (Server Core installation) 6.3.9600.20671 Windows Server 2012 R2 (Server Core installation)		6.3.9600.20671
Windows 10 for 32-bit Systems 10.0.10240.19567 Windows 10 for 32-bit Systems		10.0.10240.19567
Windows 10 for x64-based Systems 10.0.10240.19567 Windows 10 for x64-based Systems		10.0.10240.19567
Windows Server 2016 10.0.14393.5501 Windows Server 2016		10.0.14393.5501
Windows 10 Version 1607 for 32-bit Systems 10.0.14393.5501 Windows 10 Version 1607 for 32-bit Systems		10.0.14393.5501
Windows 10 Version 1607 for x64-based Systems 10.0.14393.5501 Windows 10 Version 1607 for x64-based Systems		10.0.14393.5501
Windows Server 2016 (Server Core installation) 10.0.14393.5501 Windows Server 2016 (Server Core installation)		10.0.14393.5501
Windows 10 Version 1809 for 32-bit Systems 10.0.17763.3650 Windows 10 Version 1809 for 32-bit Systems		10.0.17763.3650
Windows 10 Version 1809 for x64-based Systems 10.0.17763.3650 Windows 10 Version 1809 for x64-based Systems		10.0.17763.3650
Windows 10 Version 1809 for ARM64-based Systems 10.0.17763.3650 Windows 10 Version 1809 for ARM64-based Systems		10.0.17763.3650
Windows Server 2019 10.0.17763.3650 Windows Server 2019		10.0.17763.3650
Windows Server 2019 (Server Core installation) 10.0.17763.3650 Windows Server 2019 (Server Core installation)		10.0.17763.3650
Windows 10 Version 20H2 for 32-bit Systems 10.0.19042.2251 Windows 10 Version 20H2 for 32-bit Systems		10.0.19042.2251
Windows 10 Version 20H2 for ARM64-based Systems 10.0.19042.2251 Windows 10 Version 20H2 for ARM64-based Systems		10.0.19042.2251
Windows 10 Version 21H1 for x64-based Systems 10.0.19043.2251 Windows 10 Version 21H1 for x64-based Systems		10.0.19043.2251
Windows 10 Version 21H1 for ARM64-based Systems 10.0.19043.2251 Windows 10 Version 21H1 for ARM64-based Systems		10.0.19043.2251
Windows 10 Version 21H1 for 32-bit Systems 10.0.19043.2251 Windows 10 Version 21H1 for 32-bit Systems		10.0.19043.2251
Windows Server 2022 10.0.20348.1251 Windows Server 2022		10.0.20348.1251
Windows Server 2022 (Server Core installation) 10.0.20348.1251 Windows Server 2022 (Server Core installation)		10.0.20348.1251
Windows 11 version 21H2 for x64-based Systems 10.0.22000.1219 Windows 11 version 21H2 for x64-based Systems		10.0.22000.1219
Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.1219 Windows 11 version 21H2 for ARM64-based Systems		10.0.22000.1219
Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.2251 Windows 10 Version 21H2 for 32-bit Systems		10.0.19044.2251
Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.2251 Windows 10 Version 21H2 for ARM64-based Systems		10.0.19044.2251
Windows 10 Version 21H2 for x64-based Systems 10.0.19044.2251 Windows 10 Version 21H2 for x64-based Systems		10.0.19044.2251
Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.819 Windows 11 Version 22H2 for ARM64-based Systems		10.0.22621.819
Windows 11 Version 22H2 for x64-based Systems 10.0.22621.819 Windows 11 Version 22H2 for x64-based Systems		10.0.22621.819
Windows 10 Version 22H2 for x64-based Systems 10.0.19045.2251 Windows 10 Version 22H2 for x64-based Systems		10.0.19045.2251
Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.2251 Windows 10 Version 22H2 for ARM64-based Systems		10.0.19045.2251
Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.2251 Windows 10 Version 22H2 for 32-bit Systems		10.0.19045.2251

Known affected 43 products

Product	Version	Remediation
Windows 10 Version 22H2 for 32-bit Systems <10.0.19045.2251 Windows 10 Version 22H2 for 32-bit Systems	<10.0.19045.2251	Vendor Fix fix
Windows 10 Version 22H2 for ARM64-based Systems <10.0.19045.2251 Windows 10 Version 22H2 for ARM64-based Systems	<10.0.19045.2251	Vendor Fix fix
Windows 10 Version 22H2 for x64-based Systems <10.0.19045.2251 Windows 10 Version 22H2 for x64-based Systems	<10.0.19045.2251	Vendor Fix fix
Windows 11 Version 22H2 for x64-based Systems <10.0.22621.819 Windows 11 Version 22H2 for x64-based Systems	<10.0.22621.819	Vendor Fix fix
Windows 11 Version 22H2 for ARM64-based Systems <10.0.22621.819 Windows 11 Version 22H2 for ARM64-based Systems	<10.0.22621.819	Vendor Fix fix
Windows 10 Version 21H2 for x64-based Systems <10.0.19044.2251 Windows 10 Version 21H2 for x64-based Systems	<10.0.19044.2251	Vendor Fix fix
Windows 10 Version 21H2 for ARM64-based Systems <10.0.19044.2251 Windows 10 Version 21H2 for ARM64-based Systems	<10.0.19044.2251	Vendor Fix fix
Windows 10 Version 21H2 for 32-bit Systems <10.0.19044.2251 Windows 10 Version 21H2 for 32-bit Systems	<10.0.19044.2251	Vendor Fix fix
Windows 11 version 21H2 for ARM64-based Systems <10.0.22000.1219 Windows 11 version 21H2 for ARM64-based Systems	<10.0.22000.1219	Vendor Fix fix
Windows 11 version 21H2 for x64-based Systems <10.0.22000.1219 Windows 11 version 21H2 for x64-based Systems	<10.0.22000.1219	Vendor Fix fix
Windows Server 2022 (Server Core installation) <10.0.20348.1251 Windows Server 2022 (Server Core installation)	<10.0.20348.1251	Vendor Fix fix Vendor Fix fix
Windows Server 2022 <10.0.20348.1251 Windows Server 2022	<10.0.20348.1251	Vendor Fix fix Vendor Fix fix
Windows 10 Version 21H1 for 32-bit Systems <10.0.19043.2251 Windows 10 Version 21H1 for 32-bit Systems	<10.0.19043.2251	Vendor Fix fix
Windows 10 Version 21H1 for ARM64-based Systems <10.0.19043.2251 Windows 10 Version 21H1 for ARM64-based Systems	<10.0.19043.2251	Vendor Fix fix
Windows 10 Version 21H1 for x64-based Systems <10.0.19043.2251 Windows 10 Version 21H1 for x64-based Systems	<10.0.19043.2251	Vendor Fix fix
Windows 10 Version 20H2 for ARM64-based Systems <10.0.19042.2251 Windows 10 Version 20H2 for ARM64-based Systems	<10.0.19042.2251	Vendor Fix fix
Windows 10 Version 20H2 for 32-bit Systems <10.0.19042.2251 Windows 10 Version 20H2 for 32-bit Systems	<10.0.19042.2251	Vendor Fix fix
Windows Server 2019 (Server Core installation) <10.0.17763.3650 Windows Server 2019 (Server Core installation)	<10.0.17763.3650	Vendor Fix fix
Windows Server 2019 <10.0.17763.3650 Windows Server 2019	<10.0.17763.3650	Vendor Fix fix
Windows 10 Version 1809 for ARM64-based Systems <10.0.17763.3650 Windows 10 Version 1809 for ARM64-based Systems	<10.0.17763.3650	Vendor Fix fix
Windows 10 Version 1809 for x64-based Systems <10.0.17763.3650 Windows 10 Version 1809 for x64-based Systems	<10.0.17763.3650	Vendor Fix fix
Windows 10 Version 1809 for 32-bit Systems <10.0.17763.3650 Windows 10 Version 1809 for 32-bit Systems	<10.0.17763.3650	Vendor Fix fix
Windows Server 2016 (Server Core installation) <10.0.14393.5501 Windows Server 2016 (Server Core installation)	<10.0.14393.5501	Vendor Fix fix
Windows 10 Version 1607 for x64-based Systems <10.0.14393.5501 Windows 10 Version 1607 for x64-based Systems	<10.0.14393.5501	Vendor Fix fix
Windows 10 Version 1607 for 32-bit Systems <10.0.14393.5501 Windows 10 Version 1607 for 32-bit Systems	<10.0.14393.5501	Vendor Fix fix
Windows Server 2016 <10.0.14393.5501 Windows Server 2016	<10.0.14393.5501	Vendor Fix fix
Windows 10 for x64-based Systems <10.0.10240.19567 Windows 10 for x64-based Systems	<10.0.10240.19567	Vendor Fix fix
Windows 10 for 32-bit Systems <10.0.10240.19567 Windows 10 for 32-bit Systems	<10.0.10240.19567	Vendor Fix fix
Windows Server 2012 R2 (Server Core installation) <6.3.9600.20671 Windows Server 2012 R2 (Server Core installation)	<6.3.9600.20671	Vendor Fix fix Vendor Fix fix
Windows RT 8.1 <6.3.9600.20670 Windows RT 8.1	<6.3.9600.20670	Vendor Fix fix
Windows Server 2012 R2 <6.3.9600.20671 Windows Server 2012 R2	<6.3.9600.20671	Vendor Fix fix Vendor Fix fix
Windows 8.1 for x64-based systems <6.3.9600.20671 Windows 8.1 for x64-based systems	<6.3.9600.20671	Vendor Fix fix Vendor Fix fix
Windows 8.1 for 32-bit systems <6.3.9600.20671 Windows 8.1 for 32-bit systems	<6.3.9600.20671	Vendor Fix fix Vendor Fix fix
Windows Server 2012 (Server Core installation) <6.2.9200.23968 Windows Server 2012 (Server Core installation)	<6.2.9200.23968	Vendor Fix fix Vendor Fix fix
Windows Server 2012 <6.2.9200.23968 Windows Server 2012	<6.2.9200.23968	Vendor Fix fix Vendor Fix fix
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) <6.0.6003.21768 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	<6.0.6003.21768	Vendor Fix fix Vendor Fix fix
Windows Server 2008 R2 for x64-based Systems Service Pack 1 <6.1.7601.26221 Windows Server 2008 R2 for x64-based Systems Service Pack 1	<6.1.7601.26221	Vendor Fix fix Vendor Fix fix
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) <6.1.7601.26221 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	<6.1.7601.26221	Vendor Fix fix Vendor Fix fix
Windows 7 for x64-based Systems Service Pack 1 <6.1.7601.26221 Windows 7 for x64-based Systems Service Pack 1	<6.1.7601.26221	Vendor Fix fix Vendor Fix fix
Windows 7 for 32-bit Systems Service Pack 1 <6.1.7601.26221 Windows 7 for 32-bit Systems Service Pack 1	<6.1.7601.26221	Vendor Fix fix Vendor Fix fix
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) <6.0.6003.21768 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	<6.0.6003.21768	Vendor Fix fix Vendor Fix fix
Windows Server 2008 for x64-based Systems Service Pack 2 <6.0.6003.21768 Windows Server 2008 for x64-based Systems Service Pack 2	<6.0.6003.21768	Vendor Fix fix Vendor Fix fix
Windows Server 2008 for 32-bit Systems Service Pack 2 <6.0.6003.21768 Windows Server 2008 for 32-bit Systems Service Pack 2	<6.0.6003.21768	Vendor Fix fix Vendor Fix fix

Threats

Impact Elevation of Privilege

Exploit Status Exploited:Yes;Latest Software Release:Exploitation Detected

References

7 references

URL	Category
https://msrc.microsoft.com/update-guide/vulnerabi…	self
https://msrc.microsoft.com/csaf/2022/msrc_cve-202…	self
https://www.microsoft.com/en-us/msrc/exploitabili…	external
https://support.microsoft.com/lifecycle	external
https://www.first.org/cvss	external
https://msrc.microsoft.com/update-guide/vulnerabi…	self
https://msrc.microsoft.com/update-guide/vulnerabi…	self

Acknowledgments

Microsoft Threat Intelligence Center (MSTIC)

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Microsoft Threat Intelligence Center (MSTIC)"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2022-41073 Windows Print Spooler Elevation of Privilege Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
      },
      {
        "category": "self",
        "summary": "CVE-2022-41073 Windows Print Spooler Elevation of Privilege Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/2022/msrc_cve-2022-41073.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Windows Print Spooler Elevation of Privilege Vulnerability",
    "tracking": {
      "current_release_date": "2022-11-08T08:00:00.000Z",
      "generator": {
        "date": "2025-01-02T21:31:19.601Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2022-41073",
      "initial_release_date": "2022-11-08T08:00:00.000Z",
      "revision_history": [
        {
          "date": "2022-11-08T08:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.3650",
            "product": {
              "name": "Windows 10 Version 1809 for 32-bit Systems \u003c10.0.17763.3650",
              "product_id": "22"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.3650",
            "product": {
              "name": "Windows 10 Version 1809 for 32-bit Systems 10.0.17763.3650",
              "product_id": "11568"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1809 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.3650",
            "product": {
              "name": "Windows 10 Version 1809 for x64-based Systems \u003c10.0.17763.3650",
              "product_id": "21"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.3650",
            "product": {
              "name": "Windows 10 Version 1809 for x64-based Systems 10.0.17763.3650",
              "product_id": "11569"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1809 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.3650",
            "product": {
              "name": "Windows 10 Version 1809 for ARM64-based Systems \u003c10.0.17763.3650",
              "product_id": "20"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.3650",
            "product": {
              "name": "Windows 10 Version 1809 for ARM64-based Systems 10.0.17763.3650",
              "product_id": "11570"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1809 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.3650",
            "product": {
              "name": "Windows Server 2019 \u003c10.0.17763.3650",
              "product_id": "19"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.3650",
            "product": {
              "name": "Windows Server 2019 10.0.17763.3650",
              "product_id": "11571"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2019"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.3650",
            "product": {
              "name": "Windows Server 2019 (Server Core installation) \u003c10.0.17763.3650",
              "product_id": "18"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.3650",
            "product": {
              "name": "Windows Server 2019 (Server Core installation) 10.0.17763.3650",
              "product_id": "11572"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2019 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19043.2251",
            "product": {
              "name": "Windows 10 Version 21H1 for x64-based Systems \u003c10.0.19043.2251",
              "product_id": "15"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19043.2251",
            "product": {
              "name": "Windows 10 Version 21H1 for x64-based Systems 10.0.19043.2251",
              "product_id": "11896"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H1 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19043.2251",
            "product": {
              "name": "Windows 10 Version 21H1 for ARM64-based Systems \u003c10.0.19043.2251",
              "product_id": "14"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19043.2251",
            "product": {
              "name": "Windows 10 Version 21H1 for ARM64-based Systems 10.0.19043.2251",
              "product_id": "11897"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H1 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19043.2251",
            "product": {
              "name": "Windows 10 Version 21H1 for 32-bit Systems \u003c10.0.19043.2251",
              "product_id": "13"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19043.2251",
            "product": {
              "name": "Windows 10 Version 21H1 for 32-bit Systems 10.0.19043.2251",
              "product_id": "11898"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H1 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.20348.1251",
            "product": {
              "name": "Windows Server 2022 \u003c10.0.20348.1251",
              "product_id": "12"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.20348.1251",
            "product": {
              "name": "Windows Server 2022 10.0.20348.1251",
              "product_id": "11923"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.20348.1251",
            "product": {
              "name": "Windows Server 2022 (Server Core installation) \u003c10.0.20348.1251",
              "product_id": "11"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.20348.1251",
            "product": {
              "name": "Windows Server 2022 (Server Core installation) 10.0.20348.1251",
              "product_id": "11924"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19042.2251",
            "product": {
              "name": "Windows 10 Version 20H2 for 32-bit Systems \u003c10.0.19042.2251",
              "product_id": "17"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19042.2251",
            "product": {
              "name": "Windows 10 Version 20H2 for 32-bit Systems 10.0.19042.2251",
              "product_id": "11801"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 20H2 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19042.2251",
            "product": {
              "name": "Windows 10 Version 20H2 for ARM64-based Systems \u003c10.0.19042.2251",
              "product_id": "16"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19042.2251",
            "product": {
              "name": "Windows 10 Version 20H2 for ARM64-based Systems 10.0.19042.2251",
              "product_id": "11802"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 20H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22000.1219",
            "product": {
              "name": "Windows 11 version 21H2 for x64-based Systems \u003c10.0.22000.1219",
              "product_id": "10"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22000.1219",
            "product": {
              "name": "Windows 11 version 21H2 for x64-based Systems 10.0.22000.1219",
              "product_id": "11926"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 version 21H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22000.1219",
            "product": {
              "name": "Windows 11 version 21H2 for ARM64-based Systems \u003c10.0.22000.1219",
              "product_id": "9"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22000.1219",
            "product": {
              "name": "Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.1219",
              "product_id": "11927"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 version 21H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.2251",
            "product": {
              "name": "Windows 10 Version 21H2 for 32-bit Systems \u003c10.0.19044.2251",
              "product_id": "8"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.2251",
            "product": {
              "name": "Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.2251",
              "product_id": "11929"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.2251",
            "product": {
              "name": "Windows 10 Version 21H2 for ARM64-based Systems \u003c10.0.19044.2251",
              "product_id": "7"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.2251",
            "product": {
              "name": "Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.2251",
              "product_id": "11930"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.2251",
            "product": {
              "name": "Windows 10 Version 21H2 for x64-based Systems \u003c10.0.19044.2251",
              "product_id": "6"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.2251",
            "product": {
              "name": "Windows 10 Version 21H2 for x64-based Systems 10.0.19044.2251",
              "product_id": "11931"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22621.819",
            "product": {
              "name": "Windows 11 Version 22H2 for ARM64-based Systems \u003c10.0.22621.819",
              "product_id": "5"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22621.819",
            "product": {
              "name": "Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.819",
              "product_id": "12085"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 22H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22621.819",
            "product": {
              "name": "Windows 11 Version 22H2 for x64-based Systems \u003c10.0.22621.819",
              "product_id": "4"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22621.819",
            "product": {
              "name": "Windows 11 Version 22H2 for x64-based Systems 10.0.22621.819",
              "product_id": "12086"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 22H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.2251",
            "product": {
              "name": "Windows 10 Version 22H2 for x64-based Systems \u003c10.0.19045.2251",
              "product_id": "3"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.2251",
            "product": {
              "name": "Windows 10 Version 22H2 for x64-based Systems 10.0.19045.2251",
              "product_id": "12097"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.2251",
            "product": {
              "name": "Windows 10 Version 22H2 for ARM64-based Systems \u003c10.0.19045.2251",
              "product_id": "2"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.2251",
            "product": {
              "name": "Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.2251",
              "product_id": "12098"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.2251",
            "product": {
              "name": "Windows 10 Version 22H2 for 32-bit Systems \u003c10.0.19045.2251",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.2251",
            "product": {
              "name": "Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.2251",
              "product_id": "12099"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.10240.19567",
            "product": {
              "name": "Windows 10 for 32-bit Systems \u003c10.0.10240.19567",
              "product_id": "28"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.10240.19567",
            "product": {
              "name": "Windows 10 for 32-bit Systems 10.0.10240.19567",
              "product_id": "10729"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.10240.19567",
            "product": {
              "name": "Windows 10 for x64-based Systems \u003c10.0.10240.19567",
              "product_id": "27"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.10240.19567",
            "product": {
              "name": "Windows 10 for x64-based Systems 10.0.10240.19567",
              "product_id": "10735"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.5501",
            "product": {
              "name": "Windows 10 Version 1607 for 32-bit Systems \u003c10.0.14393.5501",
              "product_id": "25"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.5501",
            "product": {
              "name": "Windows 10 Version 1607 for 32-bit Systems 10.0.14393.5501",
              "product_id": "10852"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1607 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.5501",
            "product": {
              "name": "Windows 10 Version 1607 for x64-based Systems \u003c10.0.14393.5501",
              "product_id": "24"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.5501",
            "product": {
              "name": "Windows 10 Version 1607 for x64-based Systems 10.0.14393.5501",
              "product_id": "10853"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1607 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.5501",
            "product": {
              "name": "Windows Server 2016 \u003c10.0.14393.5501",
              "product_id": "26"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.5501",
            "product": {
              "name": "Windows Server 2016 10.0.14393.5501",
              "product_id": "10816"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2016"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.5501",
            "product": {
              "name": "Windows Server 2016 (Server Core installation) \u003c10.0.14393.5501",
              "product_id": "23"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.5501",
            "product": {
              "name": "Windows Server 2016 (Server Core installation) 10.0.14393.5501",
              "product_id": "10855"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2016 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.1.7601.26221",
            "product": {
              "name": "Windows 7 for 32-bit Systems Service Pack 1 \u003c6.1.7601.26221",
              "product_id": "40"
            }
          },
          {
            "category": "product_version",
            "name": "6.1.7601.26221",
            "product": {
              "name": "Windows 7 for 32-bit Systems Service Pack 1 6.1.7601.26221",
              "product_id": "10047"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 7 for 32-bit Systems Service Pack 1"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.1.7601.26221",
            "product": {
              "name": "Windows 7 for x64-based Systems Service Pack 1 \u003c6.1.7601.26221",
              "product_id": "39"
            }
          },
          {
            "category": "product_version",
            "name": "6.1.7601.26221",
            "product": {
              "name": "Windows 7 for x64-based Systems Service Pack 1 6.1.7601.26221",
              "product_id": "10048"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 7 for x64-based Systems Service Pack 1"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.3.9600.20671",
            "product": {
              "name": "Windows 8.1 for 32-bit systems \u003c6.3.9600.20671",
              "product_id": "33"
            }
          },
          {
            "category": "product_version",
            "name": "6.3.9600.20671",
            "product": {
              "name": "Windows 8.1 for 32-bit systems 6.3.9600.20671",
              "product_id": "10481"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 8.1 for 32-bit systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.3.9600.20671",
            "product": {
              "name": "Windows 8.1 for x64-based systems \u003c6.3.9600.20671",
              "product_id": "32"
            }
          },
          {
            "category": "product_version",
            "name": "6.3.9600.20671",
            "product": {
              "name": "Windows 8.1 for x64-based systems 6.3.9600.20671",
              "product_id": "10482"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 8.1 for x64-based systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.3.9600.20670",
            "product": {
              "name": "Windows RT 8.1 \u003c6.3.9600.20670",
              "product_id": "30"
            }
          },
          {
            "category": "product_version",
            "name": "6.3.9600.20670",
            "product": {
              "name": "Windows RT 8.1 6.3.9600.20670",
              "product_id": "10484"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows RT 8.1"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.21768",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 \u003c6.0.6003.21768",
              "product_id": "43"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.21768",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.21768",
              "product_id": "9312"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for 32-bit Systems Service Pack 2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.21768",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) \u003c6.0.6003.21768",
              "product_id": "36"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.21768",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.21768",
              "product_id": "10287"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.21768",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 \u003c6.0.6003.21768",
              "product_id": "42"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.21768",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.21768",
              "product_id": "9318"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for x64-based Systems Service Pack 2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.21768",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) \u003c6.0.6003.21768",
              "product_id": "41"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.21768",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.21768",
              "product_id": "9344"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.1.7601.26221",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 \u003c6.1.7601.26221",
              "product_id": "37"
            }
          },
          {
            "category": "product_version",
            "name": "6.1.7601.26221",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.26221",
              "product_id": "10051"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.1.7601.26221",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) \u003c6.1.7601.26221",
              "product_id": "38"
            }
          },
          {
            "category": "product_version",
            "name": "6.1.7601.26221",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.26221",
              "product_id": "10049"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.2.9200.23968",
            "product": {
              "name": "Windows Server 2012 \u003c6.2.9200.23968",
              "product_id": "35"
            }
          },
          {
            "category": "product_version",
            "name": "6.2.9200.23968",
            "product": {
              "name": "Windows Server 2012 6.2.9200.23968",
              "product_id": "10378"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.2.9200.23968",
            "product": {
              "name": "Windows Server 2012 (Server Core installation) \u003c6.2.9200.23968",
              "product_id": "34"
            }
          },
          {
            "category": "product_version",
            "name": "6.2.9200.23968",
            "product": {
              "name": "Windows Server 2012 (Server Core installation) 6.2.9200.23968",
              "product_id": "10379"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.3.9600.20671",
            "product": {
              "name": "Windows Server 2012 R2 \u003c6.3.9600.20671",
              "product_id": "31"
            }
          },
          {
            "category": "product_version",
            "name": "6.3.9600.20671",
            "product": {
              "name": "Windows Server 2012 R2 6.3.9600.20671",
              "product_id": "10483"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012 R2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.3.9600.20671",
            "product": {
              "name": "Windows Server 2012 R2 (Server Core installation) \u003c6.3.9600.20671",
              "product_id": "29"
            }
          },
          {
            "category": "product_version",
            "name": "6.3.9600.20671",
            "product": {
              "name": "Windows Server 2012 R2 (Server Core installation) 6.3.9600.20671",
              "product_id": "10543"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012 R2 (Server Core installation)"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-41073",
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.",
          "title": "What privileges could be gained by an attacker who successfully exploited this vulnerability?"
        }
      ],
      "product_status": {
        "fixed": [
          "9312",
          "9318",
          "9344",
          "10047",
          "10048",
          "10049",
          "10051",
          "10287",
          "10378",
          "10379",
          "10481",
          "10482",
          "10483",
          "10484",
          "10543",
          "10729",
          "10735",
          "10816",
          "10852",
          "10853",
          "10855",
          "11568",
          "11569",
          "11570",
          "11571",
          "11572",
          "11801",
          "11802",
          "11896",
          "11897",
          "11898",
          "11923",
          "11924",
          "11926",
          "11927",
          "11929",
          "11930",
          "11931",
          "12085",
          "12086",
          "12097",
          "12098",
          "12099"
        ],
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22",
          "23",
          "24",
          "25",
          "26",
          "27",
          "28",
          "29",
          "30",
          "31",
          "32",
          "33",
          "34",
          "35",
          "36",
          "37",
          "38",
          "39",
          "40",
          "41",
          "42",
          "43"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2022-41073 Windows Print Spooler Elevation of Privilege Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
        },
        {
          "category": "self",
          "summary": "CVE-2022-41073 Windows Print Spooler Elevation of Privilege Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.17763.3650:Security Update:https://support.microsoft.com/help/5019966",
          "product_ids": [
            "22",
            "21",
            "20",
            "19",
            "18"
          ],
          "url": "https://support.microsoft.com/help/5019966"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.19043.2251:Security Update:https://support.microsoft.com/help/5019959",
          "product_ids": [
            "15",
            "14",
            "13"
          ],
          "url": "https://support.microsoft.com/help/5019959"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.20348.1249:Security Update:https://support.microsoft.com/help/5019081",
          "product_ids": [
            "12",
            "11"
          ],
          "url": "https://support.microsoft.com/help/5019081"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.20348.1251:Security Hotpatch Update:https://support.microsoft.com/help/5019080",
          "product_ids": [
            "12",
            "11"
          ],
          "url": "https://support.microsoft.com/help/5019080"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.19042.2251:Security Update:https://support.microsoft.com/help/5019959",
          "product_ids": [
            "17",
            "16"
          ],
          "url": "https://support.microsoft.com/help/5019959"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.22000.1219:Security Update:https://support.microsoft.com/help/5019961",
          "product_ids": [
            "10",
            "9"
          ],
          "url": "https://support.microsoft.com/help/5019961"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.19044.2251:Security Update:https://support.microsoft.com/help/5019959",
          "product_ids": [
            "8",
            "7",
            "6"
          ],
          "url": "https://support.microsoft.com/help/5019959"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.22621.819:Security Update:https://support.microsoft.com/help/5019980",
          "product_ids": [
            "5",
            "4"
          ],
          "url": "https://support.microsoft.com/help/5019980"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.19045.2251:Security Update:https://support.microsoft.com/help/5019959",
          "product_ids": [
            "3",
            "2",
            "1"
          ],
          "url": "https://support.microsoft.com/help/5019959"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.10240.19567:Security Update:https://support.microsoft.com/help/5019970",
          "product_ids": [
            "28",
            "27"
          ],
          "url": "https://support.microsoft.com/help/5019970"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.14393.5501:Security Update:https://support.microsoft.com/help/5019964",
          "product_ids": [
            "25",
            "24",
            "26",
            "23"
          ],
          "url": "https://support.microsoft.com/help/5019964"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "6.1.7601.26221:Monthly Rollup:https://support.microsoft.com/help/5020000",
          "product_ids": [
            "40",
            "39",
            "37",
            "38"
          ],
          "url": "https://support.microsoft.com/help/5020000"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "6.1.7601.26221:Security Only:https://support.microsoft.com/help/5020013",
          "product_ids": [
            "40",
            "39",
            "37",
            "38"
          ],
          "url": "https://support.microsoft.com/help/5020013"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "6.3.9600.20671:Monthly Rollup:https://support.microsoft.com/help/5020023",
          "product_ids": [
            "33",
            "32",
            "31",
            "29"
          ],
          "url": "https://support.microsoft.com/help/5020023"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "6.3.9600.20670:Security Only:https://support.microsoft.com/help/5020010",
          "product_ids": [
            "33",
            "32",
            "31",
            "29"
          ],
          "url": "https://support.microsoft.com/help/5020010"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "6.3.9600.20670:Security Only:https://support.microsoft.com/help/5020010",
          "product_ids": [
            "30"
          ],
          "url": "https://support.microsoft.com/help/5020010"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "6.0.6003.21768:Monthly Rollup:https://support.microsoft.com/help/5020019",
          "product_ids": [
            "43",
            "36",
            "42",
            "41"
          ],
          "url": "https://support.microsoft.com/help/5020019"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "6.0.6003.21768:Security Only:https://support.microsoft.com/help/5020005",
          "product_ids": [
            "43",
            "36",
            "42",
            "41"
          ],
          "url": "https://support.microsoft.com/help/5020005"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "6.2.9200.23968:Monthly Rollup:https://support.microsoft.com/help/5020009",
          "product_ids": [
            "35",
            "34"
          ],
          "url": "https://support.microsoft.com/help/5020009"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "6.2.9200.23968:Security Only:https://support.microsoft.com/help/5020003",
          "product_ids": [
            "35",
            "34"
          ],
          "url": "https://support.microsoft.com/help/5020003"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 6.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32",
            "33",
            "34",
            "35",
            "36",
            "37",
            "38",
            "39",
            "40",
            "41",
            "42",
            "43"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Elevation of Privilege"
        },
        {
          "category": "exploit_status",
          "details": "Exploited:Yes;Latest Software Release:Exploitation Detected"
        }
      ],
      "title": "Windows Print Spooler Elevation of Privilege Vulnerability"
    }
  ]
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2022-41073 (GCVE-0-2022-41073)

CISA KEV

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Vendor Report Successful Exploitation Confidence: 80% Source: cisa-kev

Details

References

KEVintel KEV

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Confirmed Compromise Confidence: 70% Source: kevintel

Details

References

Solution

Solution

Solution

Solution

Tags

Sightings

Nomenclature