CVE-2022-37972

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Microsoft Endpoint Configuration Manager Spoofing Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected software

VendorProductVersions
MicrosoftMicrosoft Endpoint Configuration Manager>= 2103, < publication

References

Timeline

Published
Sep 20, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-379737.7Windows Local Session Manager (LSM) Denial of Service VulnerabilityCVE-2022-379746.5Windows Mixed Reality Developer Tools Information Disclosure VulnerabilityCVE-2022-379758.8Windows Group Policy Elevation of Privilege VulnerabilityCVE-2022-379768.8Active Directory Certificate Services Elevation of Privilege VulnerabilityCVE-2022-379776.5Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityCVE-2022-379787.5Windows Active Directory Certificate Services Security Feature BypassCVE-2022-379797.8Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2022-37988.8A vulnerability classified as critical has been found in IBAX go-ibax. Affected is an unknown function of the file /api/v2/open/tablesInfo. CVE-2022-379807.8Windows DHCP Client Elevation of Privilege VulnerabilityCVE-2022-379814.3Windows Event Logging Service Denial of Service VulnerabilityCVE-2022-379828.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2022-379837.8Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-37972: High severity, CVSS 7.5 | Vulnix