CVE-2022-23279

Windows ALPC Elevation of Privilege Vulnerability
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7 HIGH
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 91.71%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_11
-
microsoftwindows_server_2022
*
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
1909 (arm64, x64, x86)
KB5013945
20H2 (arm64, x86)
KB5013942
21H1 (arm64, x64, x86)
KB5013942
21H2 (arm64, x64, x86)
KB5013942
Windows 11
21H2 (arm64, x64)
KB5013943
Windows Server
20H2 Server Core
KB5013942
Windows Server 2022
Server Core
KB5013944
Standard
KB5013944
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23279
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23279