Main Vulnerability Database Vulnerabilities #VU67233

Buffer overflow in Microsoft Windows and Windows Server - CVE-2022-37969

Published: September 13, 2022 / Updated: January 4, 2026

Vulnerability identifier: #VU67233

CSH Severity: High

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-37969

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the Windows Common Log File System Driver. A local unprivileged user can run a specially crafted program to trigger memory corruption and execute arbitrary code with SYSTEM privileges.

Note, the vulnerability is being actively exploited in the wild.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2022-37969

Install updates from vendor's website.

Links to Public Exploits and PoC-codes

Exploit #12245 - CVE-2022-37969PoC (Tutorial of CVE-2022-37969 with focus on the methodology of Kernel exploitation, not CVE's internal causes) (January 4, 2026)

External References

Related Security Bulletins

Privilege escalation in Microsoft Windows common log file system driver