PT-2022-3746 · Microsoft · Windows Graphics+1

Marcin Wiazowski · Published 2022-07-12 · Updated 2023-06-27 · CVE-2022-22034

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Graphics Component (affected versions not specified)

Description The issue is related to insecure privilege management in the Windows Graphics Component. It allows an attacker to elevate their privileges. The vulnerability can be exploited locally, potentially leading to a privilege escalation. Technical details include the exploitation of Use-After-Free vulnerabilities in various Windows win32kfull functions, such as UMPDDrvStrokePath, UMPDDrvAlphaBlend, UMPDDrvTextOut, UMPDDrvGradientFill, UMPDDrvBitBlt, UMPDDrvStretchBlt, UMPDDrvPlgBlt, UMPDDrvStretchBltROP, and UMPDDrvTransparentBlt, as well as UMPDDrvCopyBits.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Privilege Management

Use After Free

Weakness Enumeration

CWE-269

CWE-416

Related Identifiers

BDU:2022-04534

CVE-2022-22034

ZDI-22-969

ZDI-22-970

ZDI-22-971

ZDI-22-972

ZDI-22-973

ZDI-22-974

ZDI-22-975

ZDI-22-976

ZDI-22-977

ZDI-22-978

Affected Products

Windows

Windows Graphics

References · 19

• https://zerodayinitiative.com/advisories/ZDI-22-974 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-970 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-22034 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-973 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22034 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22034 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-977 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-975 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22034 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22034 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-976 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-969 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-22034 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-971 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-978 · Security Note