CVE-2022-37976

—

CVSS 3.1

8.8 high

EPSS

2%p80

Published

Oct 11, 2022 (Oct 11, 2022)

Modified

Jun 17, 2026

Description

Active Directory Certificate Services Elevation of Privilege Vulnerability

Vendors: microsoft
Products: windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news2 stories

Microsoft Patch Tuesday Fixes New Windows Zero

The Hacker NewsOct 12, 07:07 UTC · Oct 12, 2022Vulnerability in the wildCVE-2022-41033 CVE-2022-37979 CVE-2022-37976+5 CVEs

60

Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities

Cisco TalosOct 11, 18:01 UTC · Oct 11, 2022Vulnerability CVE-2022-41038 CVE-2022-37968 CVE-2022-37976+23 CVEs

60