CVE-2022-23288

High

Published: 09 March 2022

Published

09 March 2022

Modified

21 November 2024

KEV Added

—

Patch

—

CVSS Score v3.1 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score 0.0048 65.7th percentile

Risk Priority 14 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-23288 is a high-severity an unspecified weakness vulnerability in Microsoft Windows 10. Its CVSS base score is 7.0 (High).

Operationally, ranked in the top 34.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

Windows DWM Core Library Elevation of Privilege Vulnerability

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

microsoft

windows 10

1809, 1909, 20h2, 21h1, 21h2

microsoft

windows server

2022, 20h2

microsoft

windows server 2019

all versions

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.