TI-2022-17685 Aliases CVE-2022-37966 GHSA-jrg7-vpcv-rf8r

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

MEDIUM 43Published 2022-11-09 · Updated 2026-08-10

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Privilege escalation
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from Microsoft.

Summary

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.02936 87th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Microsoft	Windows Server 2008 Service Pack 2	-	—	No fix listed	CNA
Microsoft	Windows Server 2008 R2 Service Pack 1	-	—	No fix listed	CNA
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	-	—	No fix listed	CNA
Microsoft	Windows Server 2008 Service Pack 2	-	—	No fix listed	CNA
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	-	—	No fix listed	CNA
Microsoft	Windows Server 2012	-	—	No fix listed	CNA
Microsoft	Windows Server 2012 (Server Core installation)	-	—	No fix listed	CNA
Microsoft	Windows Server 2012 R2	-	—	No fix listed	CNA
Microsoft	Windows Server 2012 R2 (Server Core installation)	-	—	No fix listed	CNA
Microsoft	Windows Server 2016	-	—	No fix listed	CNA
Microsoft	Windows Server 2016 (Server Core installation)	-	—	No fix listed	CNA
Microsoft	Windows Server 2019	-	—	No fix listed	CNA
Microsoft	Windows Server 2019 (Server Core installation)	-	—	No fix listed	CNA
Microsoft	Windows Server 2022	-	—	No fix listed	CNA

Windows Server 2008 Service Pack 2 VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2008 R2 Service Pack 1 VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2008 R2 Service Pack 1 (Server Core installation) VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2008 Service Pack 2 VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2008 Service Pack 2 (Server Core installation) VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2012 VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2012 (Server Core installation) VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2012 R2 VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2012 R2 (Server Core installation) VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2016 VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2016 (Server Core installation) VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2019 VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2019 (Server Core installation) VendorMicrosoft Affected - Fixed in — No fix listed CNA
Windows Server 2022 VendorMicrosoft Affected - Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPE	Versions	Role	Vendor
cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*	r2 sp1	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2012:-:::::::*	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*	r2	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2016:-:::::::*	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2019:-:::::::*	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2022:-:::::::*	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:fedoraproject:fedora:36:::::::*	36	Vulnerable	Fedoraproject
cpe:2.3:o:fedoraproject:fedora:37:::::::*	37	Vulnerable	Fedoraproject
cpe:2.3:a:netapp:management_services_for_element_software:-:::::::*	not specified by NVD	Vulnerable	NetApp

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* Versions r2 sp1 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Versions r2 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* Versions 36 Vulnerable ·Fedoraproject
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* Versions 37 Vulnerable ·Fedoraproject
cpe:2.3:a:netapp:management_services_for_element_software:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp

Show 2 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:netapp:management_services_for_netapp_hci:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:a:samba:samba::::::::	before 4.15.13; 4.16.0 to before 4.16.8; 4.17.0 to before 4.17.4	Vulnerable	Samba

cpe:2.3:a:netapp:management_services_for_netapp_hci:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* Versions before 4.15.13; 4.16.0 to before 4.16.8; 4.17.0 to before 4.17.4 Vulnerable ·Samba

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Not affected: 5 products

Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Red Hat Storage 3

Microsoft

Microsoft's page for this CVE →

Impact: Elevation of Privilege
Exploited: No
Publicly disclosed: No
Exploitability: Exploitation More Likely

Product	Status	Plan or fix
1	Affected	No update listed
10	Affected	No update listed
11	Affected	No update listed
12	Affected	No update listed
13	Affected	No update listed
14	Affected	No update listed
15	Affected	No update listed
16	Affected	No update listed
2	Affected	No update listed
3	Affected	No update listed
4	Affected	No update listed
5	Affected	No update listed
6	Affected	No update listed
7	Affected	No update listed
8	Affected	No update listed
9	Affected	No update listed

Timeline

2026-10-02 Threatist record created from CVE-2022-37966
2026-10-03 Alias added: GHSA-jrg7-vpcv-rf8r

References

Patch 1

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

Advisory 1

https://security.gentoo.org/glsa/202309-06

TI-2020-01431 Netlogon Elevation of Privilege Vulnerability KEVCVSS 3.1CRITICAL 10.0
TI-2020-01310 Improper input validation in Microsoft Windows Server KEVCVSS 3.1CRITICAL 10.0
TI-2019-00485 Use after free in Microsoft Windows KEVCVSS 3.1CRITICAL 9.8
TI-2017-06077 Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista… KEVCVSS 3.1CRITICAL 9.8
TI-2015-01465 HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1… KEVCVSS 3.1CRITICAL 9.8
TI-2008-04072 The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and… KEVCVSS 3.1CRITICAL 9.8

See all 3551 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

Key facts

Summary

Why it matters now

SSVC decision points

Affected products

CPE configurations NVD · 12

Remediation

Vendor assessments

Red Hat

Microsoft

Timeline

References

Patch 1

Advisory 1

More Microsoft Windows Server 2008 vulnerabilities

Sources