CVE-2022-38029
Published: 11 October 2022
Summary
CVE-2022-38029 is a high-severity Race Condition (CWE-362) vulnerability in Microsoft Windows 10. Its CVSS base score is 7.0 (High).
Operationally, ranked in the top 9.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Windows ALPC Elevation of Privilege Vulnerability, identified as CVE-2022-38029, affects the Advanced Local Procedure Call component in Windows. It carries a CVSS 3.1 score of 7.0 and is associated with CWE-362, indicating a race condition that can be triggered under specific local conditions.
An attacker with existing local access and low privileges can exploit the flaw, though successful exploitation requires high attack complexity and no user interaction. Successful abuse grants the ability to elevate privileges, resulting in high impact to confidentiality, integrity, and availability on the affected system.
Microsoft has published security guidance and updates addressing the issue through its standard advisory channels. The EPSS score for this CVE reached a peak of 0.0909 after disclosure before settling at the current value of 0.0579, indicating a measurable increase in exploitation interest following public release.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-40635
Vulnerability details
Windows ALPC Elevation of Privilege Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Accurate timestamps from internal clocks enable detection of race conditions by providing reliable event ordering in audit logs.
Coordination of concurrent security activities reduces the probability that shared resources will be accessed simultaneously without proper synchronization.