CVE-2022-24487

Deeper analysis

CVE-2022-24487 is a remote code execution vulnerability in the Windows Local Security Authority Subsystem Service (LSASS). LSASS is the Windows component responsible for enforcing security policy and handling authentication. The flaw received a CVSS 3.1 score of 8.8 with an attack vector of network, low attack complexity, low privileges required, and no user interaction.

An authenticated attacker with low privileges can exploit the vulnerability remotely to achieve arbitrary code execution, resulting in full compromise of confidentiality, integrity, and availability on the target system. The attack does not require user interaction or elevated rights beyond the initial low-privilege foothold.

Microsoft published an advisory for CVE-2022-24487 that directs administrators to apply the security updates referenced in the Microsoft Security Response Center. The EPSS score has remained flat at 0.0720 with no material rise after disclosure.