CVE-2022-38042

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Active Directory Domain Services Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-380435.5Windows Security Support Provider Interface Information Disclosure VulnerabilityCVE-2022-380447.8Windows CD-ROM File System Driver Remote Code Execution VulnerabilityCVE-2022-380458.8Windows Server Service Elevation of Privilege VulnerabilityCVE-2022-380467.5Web Account Manager Information Disclosure VulnerabilityCVE-2022-380478.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-380487.8Microsoft Office Remote Code Execution VulnerabilityCVE-2022-380497.8Microsoft Office Graphics Remote Code Execution VulnerabilityCVE-2022-38057.5The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in CVE-2022-380507.8Win32k Elevation of Privilege VulnerabilityCVE-2022-380517.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2022-380538.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-380549.8In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.
CVE-2022-38042: High severity, CVSS 7.1 | Vulnix