CVE-2022-38023

—

CVSS 3.1

8.1 high

EPSS

2%p83

Published

Nov 9, 2022 (Nov 9, 2022)

Modified

Aug 10, 2026

Description

Netlogon RPC Elevation of Privilege Vulnerability

Vendors: microsoft fedoraproject netapp samba
Products: windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022, fedora, management services for element software, management services for netapp hci, samba
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news5 stories

July 2023 Patch Tuesday forecast: A month of instability and uncertainty

Help Net SecurityJul 11, 19:22 UTC · Jul 11, 2023Vulnerability CVE-2022-37967 CVE-2022-38023 CVE-2023-32434+3 CVEs1

60

December 2022 Patch Tuesday forecast: Fine-tuning the connectivity

Help Net SecurityDec 9, 00:00 UTC · Dec 9, 2022Vulnerability CVE-2022-37967 CVE-2022-38023 CVE-2022-37966+1 CVEs

60

Microsoft fixes many zero-days under attack

Help Net SecurityNov 8, 00:00 UTC · Nov 8, 2022Exploit / PoC in the wildCVE-2022-41091 CVE-2022-41049 CVE-2022-41128+3 CVEs

60

Samba Issues Security Updates to Patch Multiple High

The Hacker NewsDec 20, 05:32 UTC · Dec 20, 2022Vulnerability CVE-2022-38023 CVE-2022-37966 CVE-2022-37967+1 CVEs

47

Samba addressed multiple high

Security AffairsDec 17, 17:29 UTC · Dec 17, 2022Vulnerability CVE-2022-38023 CVE-2022-37966 CVE-2022-37967+1 CVEs

35