Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows
Date added (CISA)
2022-03-03
Remediation due
2022-03-24
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.