CVE-2022-37998

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.2130
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.1129
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.2130
MicrosoftWindows 11 version 21H2>= 10.0.0, < 10.0.22000.1098
MicrosoftWindows 10 Version 21H2>= 10.0.19043.0, < 10.0.19044.2130
MicrosoftWindows 11 version 22H2>= 10.0.22621.0, < 10.0.22621.674

References

Timeline

Published
Oct 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-379997.8Windows Group Policy Preference Client Elevation of Privilege VulnerabilityCVE-2022-38008.8A vulnerability, which was classified as critical, has been found in IBAX go-ibax. Affected by this issue is some unknown functionality of tCVE-2022-380008.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-380016.5Microsoft Office Spoofing VulnerabilityCVE-2022-380037.8Windows Resilient File System Elevation of PrivilegeCVE-2022-380047.8Windows Fax Service Remote Code Execution VulnerabilityCVE-2022-380057.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-380066.5Windows Graphics Component Information Disclosure VulnerabilityCVE-2022-380077.8Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege VulnerabilityCVE-2022-380088.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-380098.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-38018.8A vulnerability, which was classified as critical, was found in IBAX go-ibax. This affects an unknown part of the file /api/v2/open/rowsInfo
CVE-2022-37998: High severity, CVSS 7.7 | Vulnix