Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability
CVE-2022-21967 is an elevation of privilege vulnerability in XBox (rated Important, CVSS 7.0).
1 version
Facts
- Microsoft id
CVE-2022-21967- Products
- XBox
- Severity
- Important
- Impact
- Elevation of Privilege
- CVSS
- 7.0
- CVSS vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Less Likely
- Customer action required
- Yes
- Release
- 2022-Mar
- Assigned by
- Microsoft
- MSRC revision
- 1.0
- Status pages
- Xbox network status
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2022-03-08:
Information published.
Microsoft says
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
The text as we first saw it
Seen by us · Microsoft's timestamp · Microsoft's page