PT-2022-5852 · Microsoft · Windows Graphics+1

Marcin Wiazowski · Published 2022-12-13 · Updated 2023-05-17 · CVE-2022-44697

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Graphics Component (affected versions not specified)

Description The issue is related to insufficient access restrictions in the Windows Graphics Component, which can be exploited to elevate privileges. It also involves a denial-of-service vulnerability that allows attackers to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2022-07267

CVE-2022-44697

ZDI-22-1675

ZDI-23-463

ZDI-23-464

ZDI-23-465

ZDI-23-466

ZDI-23-467

ZDI-23-468

ZDI-23-469

ZDI-23-470

ZDI-23-471

ZDI-23-472

ZDI-23-473

ZDI-23-474

ZDI-23-475

ZDI-23-476

ZDI-23-635

Affected Products

Windows

Windows Graphics

References · 26

• https://zerodayinitiative.com/advisories/ZDI-23-465 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-467 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-463 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-44697 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-471 · Security Note
• https://bdu.fstec.ru/vul/2022-07267 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44697 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-464 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-470 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-473 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-466 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-1675 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-474 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-476 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-468 · Security Note