CVE-2022-30170

—

CVSS 3.1

7.3 high

EPSS

2%p74

Published

Sep 13, 2022 (Sep 13, 2022)

Modified

Jun 17, 2026

Description

Windows Credential Roaming Service Elevation of Privilege Vulnerability

Vendors: microsoft
Products: windows 10, windows 11, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news2 stories

APT29 Exploited a Windows Feature to Compromise European Diplomatic Entity Network

The Hacker NewsNov 11, 11:51 UTC · Nov 11, 2022Threat actor CVE-2022-30170

60

APT29 abused Windows Credential Roaming in attacks

Security AffairsNov 10, 10:41 UTC · Nov 10, 2022Threat actor CVE-2022-30170

60