Riskcovery

CVE-2022-37967

Windows Kerberos Elevation of Privilege Vulnerability

State
Published
Severity
7.2 High
Published
Nov 9, 2022
Updated
Aug 10, 2026
Reserved
Aug 8, 2022

Read the record on cve.org

Description

Windows Kerberos Elevation of Privilege Vulnerability

Scores

CVSSScoreVectorSource
3.17.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Cmicrosoft

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Windows Server 2008 Service Pack 2Microsoft
  • 6.0.6003.0 to before 6.0.6003.22317Affected
Windows Server 2008 R2 Service Pack 1Microsoft
  • 6.1.7601.0 to before 6.1.7601.26769Affected
Windows Server 2008 R2 Service Pack 1 (Server Core installation)Microsoft
  • 6.1.7601.0 to before 6.1.7601.26769Affected
Windows Server 2008 Service Pack 2Microsoft
  • 6.0.6003.0 to before 6.0.6003.22317Affected
Windows Server 2008 Service Pack 2 (Server Core installation)Microsoft
  • 6.0.6003.0 to before 6.0.6003.22317Affected
Windows Server 2012Microsoft
  • 6.2.9200.0 to before 6.2.9200.24523Affected
Windows Server 2012 (Server Core installation)Microsoft
  • 6.2.9200.0 to before 6.2.9200.24523Affected
Windows Server 2012 R2Microsoft
  • 6.3.9600.0 to before 6.3.9600.21620Affected
Windows Server 2012 R2 (Server Core installation)Microsoft
  • 6.3.9600.0 to before 6.3.9600.21620Affected
Windows Server 2016Microsoft
  • 10.0.14393.0 to before 10.0.14393.6351Affected
Windows Server 2016 (Server Core installation)Microsoft
  • 10.0.14393.0 to before 10.0.14393.6351Affected
Windows Server 2019Microsoft
  • 10.0.17763.0 to before 10.0.17763.4974Affected
Windows Server 2019 (Server Core installation)Microsoft
  • 10.0.17763.0 to before 10.0.17763.4974Affected
Windows Server 2022Microsoft
  • 10.0.20348.0 to before 10.0.20348.2031Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.