Lucene search
MicrosoftMS:CVE-2022-24486HistoryApr 12, 2022 - 8:00 a.m.
Windows Kerberos Elevation of Privilege Vulnerability
2022-04-1208:00:00
Microsoft
msrc.microsoft.com
196
windows
kerberos
elevation
privilege
vulnerability
microsoft
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
High
EPSS
0
Percentile
9.5%
Affected configurations
Node
microsoftwindows_server_2016Range<10.0.14393.5066
ORmicrosoftwindows_server_2016Range<10.0.14393.5066
ORmicrosoftwindows_10_1607Range<10.0.14393.5066
ORmicrosoftwindows_10_1607Range<10.0.14393.5066
ORmicrosoftwindows_10_1507Range<10.0.10240.19265
ORmicrosoftwindows_10_1507Range<10.0.10240.19265
ORmicrosoftwindows_10_21h2Range<10.0.19044.1645
ORmicrosoftwindows_10_21h2Range<10.0.19044.1645
ORmicrosoftwindows_10_21h2Range<10.0.19044.1645
ORmicrosoftwindows_11_21h2Range<10.0.22000.613
ORmicrosoftwindows_11_21h2Range<10.0.22000.613
ORmicrosoftwindows_server_20h2Range<10.0.19042.1645
ORmicrosoftwindows_10_20h2Range<10.0.19042.1645
ORmicrosoftwindows_10_20h2Range<10.0.19042.1645
ORmicrosoftwindows_server_2022Range<10.0.20348.643
ORmicrosoftwindows_server_2022Range<10.0.20348.643
ORmicrosoftwindows_10_21h1Range<10.0.19043.1645
ORmicrosoftwindows_10_21h1Range<10.0.19043.1645
ORmicrosoftwindows_10_21h1Range<10.0.19043.1645
ORmicrosoftwindows_10_1809Range<10.0.18363.2212
ORmicrosoftwindows_10_1909Range<10.0.18363.2212
ORmicrosoftwindows_10_1909Range<10.0.18363.2212
ORmicrosoftwindows_server_2019Range<10.0.17763.2803
ORmicrosoftwindows_server_2019Range<10.0.17763.2803
ORmicrosoftwindows_10_1809Range<10.0.17763.2803
ORmicrosoftwindows_10_1809Range<10.0.17763.2803
ORmicrosoftwindows_10_1809Range<10.0.17763.2803
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_server_2016 | * | cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* |
| microsoft | windows_10_1607 | * | cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:* |
| microsoft | windows_10_1507 | * | cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:* |
| microsoft | windows_10_21h2 | * | cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* |
| microsoft | windows_11_21h2 | * | cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:* |
| microsoft | windows_server_20h2 | * | cpe:2.3:o:microsoft:windows_server_20h2:*:*:*:*:*:*:*:* |
| microsoft | windows_10_20h2 | * | cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:* |
| microsoft | windows_server_2022 | * | cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* |
| microsoft | windows_10_21h1 | * | cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:* |
| microsoft | windows_10_1809 | * | cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-24486 Windows Kerberos Elevation of Privilege Vulnerability
2022-04-15 19:03:15
nvd
nvd
CVE-2022-24486
2022-04-15 19:15:10
cve
cve
CVE-2022-24486
2022-04-15 19:15:10
prion
prion
Privilege escalation
2022-04-15 19:15:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5012653)
2022-04-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5012592)
2023-08-08 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5012591)
2022-04-13 00:00:00
nessus
nessus
KB5012653: Windows 10 version 1507 LTS Security Update (April 2022)
2022-04-12 00:00:00
KB5012592: Windows 11 Security Update (April 2022)
2022-04-12 00:00:00
mskb
mskb
April 12, 2022âKB5012653 (OS Build 10240.19265) - EXPIRED
2022-04-12 08:00:00
April 12, 2022âKB5012591 (OS Build 18363.2212)
2022-04-12 08:00:00
April 12, 2022âKB5012592 (OS Build 22000.613)
2022-04-12 08:00:00
kaspersky
kaspersky
KLA12502 Multiple vulnerabilities in Microsoft Windows
2022-04-12 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - April 2022
2022-04-12 18:48:11
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
High
EPSS
0
Percentile
9.5%
Related for MS:CVE-2022-24486