Cyber threats / Vulnerabilities

CVE-2022-41033

Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability
1.9%
EPSS
80%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation.

Vendor
Microsoft
Product
Windows COM+ Event System Service
Added to KEV
Oct 11, 2022
Remediation due
Nov 1, 2022 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-843
EPSS
1.9% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded
References