CVE-2022-23279

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Windows ALPC Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1909>= 10.0.0, < 10.0.18363.2274
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.1706
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.707
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.1706
MicrosoftWindows Server version 20H2>= 10.0.0, < 10.0.19042.1706
MicrosoftWindows 11 version 21H2>= 10.0.0, < 10.0.22000.675
MicrosoftWindows 10 Version 21H2>= 10.0.19043.0, < 10.0.19043.1706

References

Timeline

Published
May 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-23284.8The Flexi Quote Rotator WordPress plugin through 0.9.4 does not sanitise and escape its settings, allowing high privilege users such as admiCVE-2022-232805.3Microsoft Outlook for Mac Security Feature Bypass VulnerabilityCVE-2022-232815.5Windows Common Log File System Driver Information Disclosure VulnerabilityCVE-2022-232827.8Paint 3D Remote Code Execution VulnerabilityCVE-2022-232837.0Windows ALPC Elevation of Privilege VulnerabilityCVE-2022-232847.2Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-232858.8Remote Desktop Client Remote Code Execution VulnerabilityCVE-2022-232867.0Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2022-232877.0Windows ALPC Elevation of Privilege VulnerabilityCVE-2022-232887.0Windows DWM Core Library Elevation of Privilege VulnerabilityCVE-2022-23299.8A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service andCVE-2022-232907.8Windows Inking COM Elevation of Privilege Vulnerability
CVE-2022-23279: High severity, CVSS 7.0 | Vulnix