CVE-2022-37966

—

CVSS 3.1

8.1 high

EPSS

3%p84

Published

Nov 9, 2022 (Nov 9, 2022)

Modified

Aug 10, 2026

Description

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

Vendors: microsoft fedoraproject netapp samba
Products: windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022, fedora, management services for element software, management services for netapp hci, samba
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news6 stories

Install Latest Windows Update ASAP! Patches Issued for 6 Actively Exploited Zero

The Hacker NewsDec 21, 07:24 UTC · Dec 21, 2022Vulnerability in the wildCVE-2022-3723 CVE-2022-41040 CVE-2022-41082+13 CVEs

60

December 2022 Patch Tuesday forecast: Fine-tuning the connectivity

Help Net SecurityDec 9, 00:00 UTC · Dec 9, 2022Vulnerability CVE-2022-37967 CVE-2022-38023 CVE-2022-37966+1 CVEs

60

Microsoft Patch Tuesday for November 2022 — Snort rules and prominent vulnerabilities

Cisco TalosNov 8, 18:22 UTC · Nov 8, 2022Vulnerability in the wildCVE-2022-41039 CVE-2022-41044 CVE-2022-41088+9 CVEs

60

Samba Issues Security Updates to Patch Multiple High

The Hacker NewsDec 20, 05:32 UTC · Dec 20, 2022Vulnerability CVE-2022-38023 CVE-2022-37966 CVE-2022-37967+1 CVEs

47

Samba addressed multiple high

Security AffairsDec 17, 17:29 UTC · Dec 17, 2022Vulnerability CVE-2022-38023 CVE-2022-37966 CVE-2022-37967+1 CVEs

35

Microsoft releases out-of

Security AffairsNov 23, 10:28 UTC · Nov 23, 2022Vulnerability CVE-2022-37966

35