Microsoft Windows CSRSS Security Feature Bypass Vulnerability
Microsoft · Client-Server Run-time Subsystem (CSRSS)
Date added (CISA)
2022-03-28
Remediation due
2022-04-18
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.