CVE-2022-30166
Published: 15 June 2022
Summary
CVE-2022-30166 is a high-severity an unspecified weakness vulnerability in Microsoft Windows 10. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 8.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
The vulnerability tracked as CVE-2022-30166 is an elevation-of-privilege flaw in the Local Security Authority Subsystem Service (LSASS) on Windows. It received a CVSS 3.1 base score of 7.8 and was published on 15 June 2022.
A local attacker with a low-privileged account can exploit the issue without user interaction to obtain SYSTEM-level access, compromising the confidentiality, integrity, and availability of the affected system. Public exploit code demonstrating impersonation-level check bypasses against LsapGetClientInfo has been posted to Packet Storm.
Microsoft’s security advisory and update guide direct administrators to apply the patches released in the June 2022 Patch Tuesday cycle; the guidance also notes that the vulnerability is addressed by the standard monthly update process for supported Windows versions. The associated EPSS score has remained essentially flat near 0.076 since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-35374
Vulnerability details
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.