CVE-2022-24525: Windows Update Stack Elevation of Privilege Vulnerability
Published Mar 8, 2022
·Updated
Windows Update Stack Elevation of Privilege Vulnerability
Affected Software
22 affected componentsFixes available
Microsoft Windows Server=20H2
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows 10=20H2
Microsoft Windows 10=20H2
Microsoft Windows 10=20H2
Microsoft Windows 10=21H1
Microsoft Windows 10=21H1
Microsoft Windows 10=21H1
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=20h2
Microsoft Windows 10=21h1
Microsoft Windows 10=21h2
Microsoft Windows 10=1909
Microsoft Windows 11
Microsoft Windows 11
Microsoft Windows Server=20h2
Event History
Mar 8, 2022
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:00 AM
Affected Software
Updated
via Microsoft·08:00 AM
Description
Mar 9, 2022
CVE Published
via MITRE·05:08 PM
Data Sourced
via MITRE·05:08 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2022-24525?
CVE-2022-24525 has a severity rating of Important according to Microsoft.
2
How do I fix CVE-2022-24525?
To fix CVE-2022-24525, install the appropriate security updates provided by Microsoft for affected Windows versions.
3
Which Windows versions are affected by CVE-2022-24525?
CVE-2022-24525 affects Windows 10, Windows 11, and Windows Server 20H2.
4
Can CVE-2022-24525 allow malware installation?
Yes, CVE-2022-24525 can potentially allow an attacker to elevate privileges and install malware.
5
What type of vulnerability is CVE-2022-24525?
CVE-2022-24525 is an Elevation of Privilege vulnerability within the Windows Update Stack.