Technical Severity
HIGHCVSS v3.1 Metrics
7.8
/ 10
Minimal Risk
Critical
Vector Specification
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitation Likelihood
EPSS Prediction
11.86
%
Predictive Probability
Percentile Rank
93.7
th
Documented as more likely to be exploited than 93.7% of known CVEs.
Detection Date
May 23, 2022
Remediation Due
Jun 13, 2022
CISA Catalog Active
Threat Analysis
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
Remediation Directive
Apply updates per vendor instructions.