CVE-2022-24505: Windows ALPC Elevation of Privilege Vulnerability
Published Mar 8, 2022
·Updated
Windows ALPC Elevation of Privilege Vulnerability
Affected Software
41 affected componentsFixes available
Microsoft Windows Server=20H2
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2016
Microsoft Windows 10=20H2
Microsoft Windows 10=20H2
Microsoft Windows 10=20H2
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1607
Microsoft Windows 10=1607
Microsoft Windows 10=21H1
Microsoft Windows 10=21H1
Microsoft Windows 10=21H1
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10
Microsoft Windows 10
Microsoft Windows 10
Microsoft Windows 10=20h2
Microsoft Windows 10=21h1
Microsoft Windows 10=21h2
Microsoft Windows 10=1607
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 11
Microsoft Windows 11
Microsoft Windows Server=20h2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Event History
Mar 8, 2022
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Mar 9, 2022
CVE Published
via MITRE·05:08 PM
Data Sourced
via MITRE·05:08 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2022-24505?
CVE-2022-24505 has a severity rating of important, indicating it could lead to an elevation of privilege if exploited.
2
How do I fix CVE-2022-24505?
To fix CVE-2022-24505, apply the specific patches released by Microsoft for your affected version of Windows.
3
What products are affected by CVE-2022-24505?
CVE-2022-24505 affects multiple versions of Microsoft Windows 10, Windows 11, and Windows Server, including specific versions like 20H2 and 21H2.
4
Can CVE-2022-24505 be exploited remotely?
CVE-2022-24505 requires local access for exploitation, as it is an elevation of privilege vulnerability.
5
What does an elevation of privilege vulnerability mean in the context of CVE-2022-24505?
An elevation of privilege vulnerability like CVE-2022-24505 allows an attacker to gain higher permissions on a system than intended.