Dashboard Vulnerabilities KEV Ranking CVSS Blind Spot Scan

VulnIntel

Privacy Policy Terms of Service Data License

© 2026 VulnIntel. All rights reserved.

CVE-2022-41033 — VulnIntel

CVE-2022-41033

CVE-2022-41033

HIGH

KEV

Windows COM+ Event System Service Elevation of Privilege Vulnerability

StatusAnalyzed

설명

Windows COM+ Event System Service Elevation of Privilege Vulnerability

Score Summary

CVSS Score: 7.8
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 78.00
Exploitation signal(KEV listed) ×1.50
VPI 100.00
VPI formula vpi-v1
EPSS: 1.8%
(상위 75.5%)
Attack Vector: Local Access
Low Complexity
Low Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 10/11/2022(4 years ago)
Modified: 01/13/2026(6 months ago)
Source: KEV, NVD
Products: 16

CISA KEV Listing

Vendor / Project: Microsoft
Product: Windows COM+ Event System Service

Date Added: 10/11/2022
Due Date: 11/01/2022Overdue 1359d

Required Action

Apply updates per vendor instructions.

Vulnerability Lifecycle

CISA KEVKEV Listed10/11/2022
NVDPublished10/11/2022
CISA KEV

CWE Weakness Classification

CWE-843
NVD
Secondary

References (3)

NVD
Patch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41033
NVD
Patch
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41033
NVD

Affected Products (16)

Due Date

11/01/2022

NVDLast Modified01/13/2026

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41033

Vulnerabilities