First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-37964

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Windows Kernel Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Windows 7	>= 6.1.0, < 6.1.7601.26115
Microsoft	Windows 7 Service Pack 1	>= 6.1.0, < 6.1.7601.26115
Microsoft	Windows Server 2008 Service Pack 2	>= 6.0.6003.0, < 6.0.6003.21666
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	>= 6.0.6003.0, < 6.0.6003.21666
Microsoft	Windows Server 2008 Service Pack 2	>= 6.0.6003.0, < 6.0.6003.21666
Microsoft	Windows Server 2008 R2 Service Pack 1	>= 6.1.7601.0, < 6.1.7601.26115
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	>= 6.1.7601.0, < 6.1.7601.26115

References

Timeline

Published: Sep 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-379655.9Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability CVE-2022-379668.1Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability CVE-2022-379677.2Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-3796810.0Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability CVE-2022-379697.8Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2022-37976.1A vulnerability was found in eolinker apinto-dashboard. It has been rated as problematic. This issue affects some unknown processing of the CVE-2022-379707.8Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2022-379717.1Microsoft Windows Defender Elevation of Privilege Vulnerability CVE-2022-379727.5Microsoft Endpoint Configuration Manager Spoofing Vulnerability CVE-2022-379737.7Windows Local Session Manager (LSM) Denial of Service Vulnerability CVE-2022-379746.5Windows Mixed Reality Developer Tools Information Disclosure Vulnerability CVE-2022-379758.8Windows Group Policy Elevation of Privilege Vulnerability

CVE-2022-37964: High severity, CVSS 7.8 | Vulnix