CVE-2022-41033

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Windows COM+ Event System Service Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-843

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2022
Last modified
Jun 17, 2026
Added to CISA KEV
Oct 11, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-410347.8Visual Studio Code Remote Code Execution VulnerabilityCVE-2022-410355.3Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2022-410368.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-410378.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-410388.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-410398.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-41045.5A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting inCVE-2022-410408.8Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-410427.4Visual Studio Code Information Disclosure VulnerabilityCVE-2022-410433.3Microsoft Office Information Disclosure VulnerabilityCVE-2022-410448.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-410457.8Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-41033: High severity, CVSS 7.8 | Vulnix