First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-44673

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Windows 10 Version 1809	>= 10.0.17763.0, < 10.0.17763.3770
Microsoft	Windows 10 Version 21H1	>= 10.0.0, < 10.0.19043.2364
Microsoft	Windows 10 Version 20H2	>= 10.0.0, < 10.0.19042.2364
Microsoft	Windows 10 Version 21H2	>= 10.0.19044.0, < 10.0.19044.2364
Microsoft	Windows 10 Version 22H2	>= 10.0.19045.0, < 10.0.19045.2364
Microsoft	Windows 10 Version 1507	>= 10.0.10240.0, < 10.0.10240.19624
Microsoft	Windows 10 Version 1607	>= 10.0.14393.0, < 10.0.14393.5582
Microsoft	Windows 7	>= 6.1.0, < 6.1.7601.26266
Microsoft	Windows 8.1	>= 6.3.0, < 6.3.9600.20721
Microsoft	Windows Server 2008 Service Pack 2	>= 6.0.6003.0, < 6.0.6003.21815
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	>= 6.0.6003.0, < 6.0.6003.21815

References

Timeline

Published: Dec 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-446745.5Windows Bluetooth Driver Information Disclosure Vulnerability CVE-2022-446757.8Windows Bluetooth Driver Elevation of Privilege Vulnerability CVE-2022-446768.1Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability CVE-2022-446777.8Windows Projected File System Elevation of Privilege Vulnerability CVE-2022-446787.8Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-446796.5Windows Graphics Component Information Disclosure Vulnerability CVE-2022-44685.4The WP Recipe Maker WordPress plugin before 8.6.1 does not validate and escape some of its shortcode attributes before outputting them back CVE-2022-446807.8Windows Graphics Component Elevation of Privilege Vulnerability CVE-2022-446817.8Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-446826.8Windows Hyper-V Denial of Service Vulnerability CVE-2022-446837.8Windows Kernel Elevation of Privilege Vulnerability CVE-2022-446846.5Windows Local Session Manager (LSM) Denial of Service Vulnerability

CVE-2022-44673: High severity, CVSS 7.0 | Vulnix