CVE-2022-41033

CVE Published 2022-10-11
Related CWE(s) CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
Related Vendor(s) microsoft
Related Product(s) windows_10_1507, windows_10_21h1, windows_11, windows_8.1, windows_server_2008, windows_10_21h2, windows_server_2012, windows_10_1809, windows_11_21h2, windows_10, windows_10_1607, windows_server_2022, windows_11_22h2, windows_server_2019, windows_server_2016, windows_7, windows_10_20h2, windows_rt_8.1
Exploitation Reported (CISA KEV) 2022-10-11
CVSS 3 Base Score 7.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector LOCAL

Windows COM+ Event System Service Elevation of Privilege Vulnerability

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References