
Cloud Vulnerability DB
A community-led vulnerabilities database
The Windows Graphics Component Elevation of Privilege Vulnerability (CVE-2022-44697) is a security flaw that affects Microsoft Windows systems. The vulnerability specifically exists within the win32kfull driver component of the Windows operating system. This vulnerability was initially reported to Microsoft on August 19, 2022, and was publicly disclosed on April 24, 2023 (ZDI Advisory).
The vulnerability stems from a NULL pointer dereference issue in the win32kfull driver. The flaw has been assigned a CVSS score of 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H), indicating a moderate to high severity level. The technical assessment shows that the vulnerability requires local access and low privileges to exploit (ZDI Advisory).
When successfully exploited, this vulnerability can lead to a denial-of-service condition on affected Windows systems. The impact is primarily focused on system availability, with no direct impact on confidentiality or integrity (ZDI Advisory).
Microsoft has released a security update to address this vulnerability. Users and system administrators are advised to apply the available patches through the Microsoft security update system (Microsoft MSRC).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."