Rapid7 Vulnerability & Exploit Database

Microsoft Windows: CVE-2022-35756: Windows Kerberos Elevation of Privilege Vulnerability

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Microsoft Windows: CVE-2022-35756: Windows Kerberos Elevation of Privilege Vulnerability

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
08/09/2022
Created
08/29/2022
Added
08/09/2022
Modified
07/22/2024

Description

Windows Kerberos Elevation of Privilege Vulnerability

Solution(s)

  • microsoft-windows-windows_10-1507-kb5016639
  • microsoft-windows-windows_10-1607-kb5016622
  • microsoft-windows-windows_10-1809-kb5016623
  • microsoft-windows-windows_10-20h2-kb5016616
  • microsoft-windows-windows_10-21h1-kb5016616
  • microsoft-windows-windows_10-21h2-kb5016616
  • microsoft-windows-windows_11-21h2-kb5016629
  • microsoft-windows-windows_server_2022-21h2-kb5016627
  • microsoft-windows-windows_server_2022-22h2-kb5016627
  • msft-kb5016616-f6c6e642-b604-4ab9-ab8b-4cbf1307b3c7
  • msft-kb5016622-7fd8971b-436f-4b6d-8aae-e36a2b9886a5
  • msft-kb5016623-b3f4dad6-4572-4957-ae8f-81df5a2870e2
  • msft-kb5016679-2ebaf040-c03d-40fd-9edc-4a76308669f8
  • msft-kb5016679-57461ffc-a63a-425c-99d4-f1a023b537d1
  • msft-kb5016679-6535387a-b0d4-4430-90ac-63b289542907
  • msft-kb5016679-65f2bf43-7c07-464d-9cc5-4edb940467d8
  • msft-kb5016679-9b078d1d-a657-4c4c-bad8-29a49bacea24
  • msft-kb5016683-5f63176b-842e-4fa2-8aa2-287714ee7ef6
  • msft-kb5016683-afc2544a-aa8d-46d5-a3d0-8bd6c32f6312
  • msft-kb5016683-ea2ca0ef-c9b3-43d8-ab10-8fe2a4d09aea
  • msft-kb5016684-0c0671d0-c2ed-4e83-96f1-9b25023f2793
  • msft-kb5016684-7603268f-a892-48c9-95ff-b834889289b5
  • msft-kb5016684-ce91e9cb-4c8f-48d5-965f-ed83b295d2bc

References

View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;