CVEFinder.io

CVE-2022-37966

⚠️ high
🔍 Scan for this CVE
Summary

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

CVSS Score
8.1
High
EPSS Score
1.4
Exploit Probability
Published Date
2022-11-09
First Seen: 2026-01-05
📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 77.4% of all 329,456 vulnerabilities in our database.

#74,337
Top 25% most severe
Severity Percentile
🎯 CISA SSVC Assessment Updated: Oct 15, 2024
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2025-01-02
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

📦 Affected Products 14

Vendor Product Status Affected Versions
samba samba Affected
< 4.15.13
samba samba Affected
≥ 4.16.0 < 4.16.8
samba samba Affected
≥ 4.17.0 < 4.17.4
fedoraproject fedora Affected
v36
fedoraproject fedora Affected
v37
microsoft windows_server_2008 Affected
v-
microsoft windows_server_2008 Affected
vr2
microsoft windows_server_2012 Affected
v-
microsoft windows_server_2012 Affected
vr2
microsoft windows_server_2016 Affected
v-
microsoft windows_server_2019 Affected
v-
netapp management_services_for_element_software Affected
v-
microsoft windows_server_2022 Affected
v-
netapp management_services_for_netapp_hci Affected
v-

🔗 References 2

https://msrc.microsoft.com/update-guide/vulnerabilit...
Patch Vendor Advisory
https://security.gentoo.org/glsa/202309-06
Third Party Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-34335 ⚠️ high 7.0 0.2 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca... 2026-06-09
CVE-2026-40404 ⚠️ high 7.8 0.3 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability 2026-06-09
CVE-2026-40409 ⚠️ high 7.8 0.2 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability 2026-06-09
CVE-2026-41092 ⚠️ high 7.8 0.3 Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally. 2026-06-09
CVE-2026-41108 ⚠️ high 7.0 0.2 Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally. 2026-06-09
CVE-2026-42836 ⚠️ high 7.0 0.2 Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Servic... 2026-06-09
These CVEs affect the same products