CVE-2022-23922

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the Program Announcer directory and elevate permissions whenever the program is executed.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published
Feb 24, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-239239.8All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main application. ExportCVE-2022-239248.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239258.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239268.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239278.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239288.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239298.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-23935.7A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication isCVE-2022-239308.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239318.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239328.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239338.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitra
CVE-2022-23922: High severity, CVSS 7.8 | Vulnix