peter bassill · operator
$ cve CVE-2022-37969 JSON

CVE-2022-37969 KEV

7.8
HIGH · CVSS 3.1 · EPSS 28.3% (pctl 98)

Patch first

On CISA KEV — known exploited in the wild, due 2022-10-05.

Description

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS28.28% — more likely to be exploited than 98% of all CVEs
WeaknessCWE-787
On CISA KEVyes — remediate by 2022-10-05
Public exploitnone known
Published2022-09-13
Last modified2026-09-10

CISA KEV

NameMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Added2022-09-14
Due2022-10-05
Vendor / productMicrosoft / Windows
Ransomware useknown

Affected (15)

VendorProduct
microsoftwindows 10 1507
microsoftwindows 10 1607
microsoftwindows 10 1809
microsoftwindows 10 20h2
microsoftwindows 10 21h1
microsoftwindows 10 21h2
microsoftwindows 11 21h2
microsoftwindows 7
microsoftwindows 8.1
microsoftwindows rt 8.1
microsoftwindows server 2008
microsoftwindows server 2012
microsoftwindows server 2016
microsoftwindows server 2019
microsoftwindows server 2022

References

→ the Explorer  ·  watch your stack  ·  NVD