Technical Severity
HIGH
CVSS v3.1 Metrics
7.8
/ 10
Minimal Risk
Critical
Vector Specification
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitation Likelihood
EPSS Prediction
5.71
%
Predictive Probability
Percentile Rank
90.2
th
Documented as more likely to be exploited than 90.2% of known CVEs.
Detection Date
May 23, 2022
Remediation Due
Jun 13, 2022
CISA Catalog Active
Threat Analysis
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
Remediation Directive
Apply updates per vendor instructions.