CVE-2022-33679

Deeper analysis

CVE-2022-33679 is a Windows Kerberos elevation of privilege vulnerability affecting the Kerberos authentication component in Windows. It carries a CVSS 3.1 base score of 8.1 with an attack vector of network, high attack complexity, no required privileges or user interaction, and impacts on confidentiality, integrity, and availability all rated high.

An unauthenticated remote attacker can exploit the flaw over the network to obtain elevated privileges on the target system, potentially leading to full control of the affected Windows host. The high complexity rating indicates that successful exploitation requires specific conditions beyond simple reachability.

Microsoft has published mitigation guidance in its security update guide at the referenced URL, directing administrators to apply the relevant patches for affected Windows versions.

The associated EPSS score stands at 0.7788 with an identical recorded peak, indicating sustained but not newly emergent exploitation interest after disclosure.