CVE-2022-22047VulnerabilityPublished 07/12/2022Updated 10/24/2026

CVE-2022-22047: Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

Affects Microsoft WindowsSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 07/12/2022
KEV deadline: 08/02/2022
EPSS: 18.8% chance of exploitation in 30 days – higher than 97% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

Description

CVE-2022-22047 is a privilege escalation vulnerability in the Microsoft Windows Client Server Runtime Subsystem (CSRSS) that allows an attacker to gain SYSTEM-level privileges. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

Microsoft Windows CSRSS contains an unspecified vulnerability (CVE-2022-22047) that enables privilege escalation to SYSTEM privileges. This vulnerability has been observed to be exploited in the wild, indicating active threat usage. The exact technical details of the vulnerability are not disclosed in the provided information. No patch or remediation details are included in the source data.

Impact

Successful exploitation of this vulnerability allows an attacker to escalate privileges to SYSTEM level on affected Windows systems, potentially enabling full control over the compromised machine. This elevates the risk of further malicious activity, including persistence, data theft, or system manipulation.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the lack of explicit patch or mitigation information, organizations should monitor official Microsoft security advisories for updates and apply any released fixes promptly.

Weaknesses

CWE-426Unclassified weakness (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 12:05:29 UTC

Weaknesses

References

Related threats