TI-2022-17716 Aliases CVE-2022-37997 GHSA-8g39-7r49-jcm2

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 35Published 2022-10-11 · Updated 2025-01-02

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Privilege escalation
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Microsoft. Impact type from Microsoft.

Summary

Windows Graphics Component Elevation of Privilege Vulnerability

Why it matters now

EPSS 0.00679 52nd percentileScored 2026-11-07

Fix Fixed Microsoft: 15 updates

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Microsoft	Windows 10 Version 1809	10.0.17763.0 to before 10.0.17763.3532	10.0.17763.3532	Patch available	CNA
Microsoft	Windows 10 Version 1809	10.0.0 to before 10.0.17763.3532	10.0.17763.3532	Patch available	CNA
Microsoft	Windows Server 2019	10.0.17763.0 to before 10.0.17763.3532	10.0.17763.3532	Patch available	CNA
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 to before 10.0.17763.3532	10.0.17763.3532	Patch available	CNA
Microsoft	Windows 10 Version 21H1	10.0.0 to before 10.0.19043.2130	10.0.19043.2130	Patch available	CNA
Microsoft	Windows Server 2022	10.0.20348.0 to before 10.0.20348.1129	10.0.20348.1129	Patch available	CNA
Microsoft	Windows 10 Version 20H2	10.0.0 to before 10.0.19042.2130	10.0.19042.2130	Patch available	CNA
Microsoft	Windows 11 version 21H2	10.0.0 to before 10.0.22000.1098	10.0.22000.1098	Patch available	CNA
Microsoft	Windows 10 Version 21H2	10.0.19043.0 to before 10.0.19044.2130	10.0.19044.2130	Patch available	CNA
Microsoft	Windows 11 version 22H2	10.0.22621.0 to before 10.0.22621.674	10.0.22621.674	Patch available	CNA
Microsoft	Windows 10 Version 1507	10.0.10240.0 to before 10.0.10240.19507	10.0.10240.19507	Patch available	CNA
Microsoft	Windows 10 Version 1607	10.0.14393.0 to before 10.0.14393.5427	10.0.14393.5427	Patch available	CNA
Microsoft	Windows Server 2016	10.0.14393.0 to before 10.0.14393.5427	10.0.14393.5427	Patch available	CNA
Microsoft	Windows Server 2016 (Server Core installation)	10.0.14393.0 to before 10.0.14393.5427	10.0.14393.5427	Patch available	CNA
Microsoft	Windows 7	6.1.0 to before 6.1.7601.26174	6.1.7601.26174	Patch available	CNA
Microsoft	Windows 7 Service Pack 1	6.1.0 to before 6.1.7601.26174	6.1.7601.26174	Patch available	CNA
Microsoft	Windows 8.1	6.3.0 to before 6.3.9600.20625	6.3.9600.20625	Patch available	CNA
Microsoft	Windows Server 2008 Service Pack 2	6.0.6003.0 to before 6.0.6003.21721	6.0.6003.21721	Patch available	CNA
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	6.0.6003.0 to before 6.0.6003.21721	6.0.6003.21721	Patch available	CNA
Microsoft	Windows Server 2008 Service Pack 2	6.0.6003.0 to before 6.0.6003.21721	6.0.6003.21721	Patch available	CNA
Microsoft	Windows Server 2008 R2 Service Pack 1	6.1.7601.0 to before 6.1.7601.26174	6.1.7601.26174	Patch available	CNA
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	6.1.7601.0 to before 6.1.7601.26174	6.1.7601.26174	Patch available	CNA
Microsoft	Windows Server 2012	6.2.9200.0 to before 6.2.9200.23920	6.2.9200.23920	Patch available	CNA
Microsoft	Windows Server 2012 (Server Core installation)	6.2.9200.0 to before 6.2.9200.23920	6.2.9200.23920	Patch available	CNA
Microsoft	Windows Server 2012 R2	6.3.9600.0 to before 6.3.9600.20625	6.3.9600.20625	Patch available	CNA
Microsoft	Windows Server 2012 R2 (Server Core installation)	6.3.9600.0 to before 6.3.9600.20625	6.3.9600.20625	Patch available	CNA

Windows 10 Version 1809 VendorMicrosoft Affected 10.0.17763.0 to before 10.0.17763.3532 Fixed in 10.0.17763.3532 Patch available CNA
Windows 10 Version 1809 VendorMicrosoft Affected 10.0.0 to before 10.0.17763.3532 Fixed in 10.0.17763.3532 Patch available CNA
Windows Server 2019 VendorMicrosoft Affected 10.0.17763.0 to before 10.0.17763.3532 Fixed in 10.0.17763.3532 Patch available CNA
Windows Server 2019 (Server Core installation) VendorMicrosoft Affected 10.0.17763.0 to before 10.0.17763.3532 Fixed in 10.0.17763.3532 Patch available CNA
Windows 10 Version 21H1 VendorMicrosoft Affected 10.0.0 to before 10.0.19043.2130 Fixed in 10.0.19043.2130 Patch available CNA
Windows Server 2022 VendorMicrosoft Affected 10.0.20348.0 to before 10.0.20348.1129 Fixed in 10.0.20348.1129 Patch available CNA
Windows 10 Version 20H2 VendorMicrosoft Affected 10.0.0 to before 10.0.19042.2130 Fixed in 10.0.19042.2130 Patch available CNA
Windows 11 version 21H2 VendorMicrosoft Affected 10.0.0 to before 10.0.22000.1098 Fixed in 10.0.22000.1098 Patch available CNA
Windows 10 Version 21H2 VendorMicrosoft Affected 10.0.19043.0 to before 10.0.19044.2130 Fixed in 10.0.19044.2130 Patch available CNA
Windows 11 version 22H2 VendorMicrosoft Affected 10.0.22621.0 to before 10.0.22621.674 Fixed in 10.0.22621.674 Patch available CNA
Windows 10 Version 1507 VendorMicrosoft Affected 10.0.10240.0 to before 10.0.10240.19507 Fixed in 10.0.10240.19507 Patch available CNA
Windows 10 Version 1607 VendorMicrosoft Affected 10.0.14393.0 to before 10.0.14393.5427 Fixed in 10.0.14393.5427 Patch available CNA
Windows Server 2016 VendorMicrosoft Affected 10.0.14393.0 to before 10.0.14393.5427 Fixed in 10.0.14393.5427 Patch available CNA
Windows Server 2016 (Server Core installation) VendorMicrosoft Affected 10.0.14393.0 to before 10.0.14393.5427 Fixed in 10.0.14393.5427 Patch available CNA
Windows 7 VendorMicrosoft Affected 6.1.0 to before 6.1.7601.26174 Fixed in 6.1.7601.26174 Patch available CNA
Windows 7 Service Pack 1 VendorMicrosoft Affected 6.1.0 to before 6.1.7601.26174 Fixed in 6.1.7601.26174 Patch available CNA
Windows 8.1 VendorMicrosoft Affected 6.3.0 to before 6.3.9600.20625 Fixed in 6.3.9600.20625 Patch available CNA
Windows Server 2008 Service Pack 2 VendorMicrosoft Affected 6.0.6003.0 to before 6.0.6003.21721 Fixed in 6.0.6003.21721 Patch available CNA
Windows Server 2008 Service Pack 2 (Server Core installation) VendorMicrosoft Affected 6.0.6003.0 to before 6.0.6003.21721 Fixed in 6.0.6003.21721 Patch available CNA
Windows Server 2008 Service Pack 2 VendorMicrosoft Affected 6.0.6003.0 to before 6.0.6003.21721 Fixed in 6.0.6003.21721 Patch available CNA
Windows Server 2008 R2 Service Pack 1 VendorMicrosoft Affected 6.1.7601.0 to before 6.1.7601.26174 Fixed in 6.1.7601.26174 Patch available CNA
Windows Server 2008 R2 Service Pack 1 (Server Core installation) VendorMicrosoft Affected 6.1.7601.0 to before 6.1.7601.26174 Fixed in 6.1.7601.26174 Patch available CNA
Windows Server 2012 VendorMicrosoft Affected 6.2.9200.0 to before 6.2.9200.23920 Fixed in 6.2.9200.23920 Patch available CNA
Windows Server 2012 (Server Core installation) VendorMicrosoft Affected 6.2.9200.0 to before 6.2.9200.23920 Fixed in 6.2.9200.23920 Patch available CNA
Windows Server 2012 R2 VendorMicrosoft Affected 6.3.9600.0 to before 6.3.9600.20625 Fixed in 6.3.9600.20625 Patch available CNA
Windows Server 2012 R2 (Server Core installation) VendorMicrosoft Affected 6.3.9600.0 to before 6.3.9600.20625 Fixed in 6.3.9600.20625 Patch available CNA

CPE configurations NVD · 20

CPE	Versions	Role	Vendor
cpe:2.3:o:microsoft:windows_10:-:::::::*	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10:20h2:::::::*	20h2	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10:21h1:::::::*	21h1	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10:21h2:::::::*	21h2	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10:1607:::::::*	1607	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10:1809:::::::*	1809	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_11:-::::::arm64:	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_11:-::::::x64:	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_11:22h2::::::arm64:	22h2	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_11:22h2::::::x64:	22h2	Vulnerable	Microsoft

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:* Versions 20h2 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:* Versions 21h1 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:* Versions 21h2 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* Versions 1607 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* Versions 1809 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:* Versions 22h2 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:* Versions 22h2 Vulnerable ·Microsoft

Show 10 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:microsoft:windows_7:-:sp1::::::	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_8.1:-:::::::*	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*	r2 sp1	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2012:-:::::::*	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*	r2	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2016:-:::::::*	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2019:-:::::::*	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2022:-:::::::*	not specified by NVD	Vulnerable	Microsoft

cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* Versions r2 sp1 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Versions r2 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft

Remediation

Microsoft 15 updates

KB5018479
Security Only
- Windows 7 for 32-bit Systems Service Pack 1 6.1.7601.26174
- Windows 7 for x64-based Systems Service Pack 1 6.1.7601.26174
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.26174
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.26174
KB5018478
Security Only
- Windows Server 2012 6.2.9200.23920
- Windows Server 2012 (Server Core installation) 6.2.9200.23920
KB5018476
Security Only
- Windows 8.1 for 32-bit systems 6.3.9600.20625
- Windows 8.1 for x64-based systems 6.3.9600.20625
- Windows Server 2012 R2 6.3.9600.20625
- Windows Server 2012 R2 (Server Core installation) 6.3.9600.20625

Show 12 more Microsoft updates

KB5018474
Monthly Rollup
- Windows 8.1 for 32-bit systems 6.3.9600.20625
- Windows 8.1 for x64-based systems 6.3.9600.20625
- Windows RT 8.1 6.3.9600.20625
- Windows Server 2012 R2 6.3.9600.20625
- Windows Server 2012 R2 (Server Core installation) 6.3.9600.20625
KB5018457
Monthly Rollup
- Windows Server 2012 6.2.9200.23920
- Windows Server 2012 (Server Core installation) 6.2.9200.23920
KB5018454
Monthly Rollup
- Windows 7 for 32-bit Systems Service Pack 1 6.1.7601.26174
- Windows 7 for x64-based Systems Service Pack 1 6.1.7601.26174
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.26174
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.26174
KB5018450
Monthly Rollup
- Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.21721
- Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.21721
- Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.21721
- Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.21721
KB5018446
Security Only
- Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.21721
- Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.21721
- Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.21721
- Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.21721
KB5018427
Security Update
- Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.674
- Windows 11 Version 22H2 for x64-based Systems 10.0.22621.674
KB5018425
Security Update
- Windows 10 for 32-bit Systems 10.0.10240.19507
- Windows 10 for x64-based Systems 10.0.10240.19507
KB5018421
Security Update
- Windows Server 2022 10.0.20348.1129
- Windows Server 2022 (Server Core installation) 10.0.20348.1129
KB5018419
Security Update
- Windows 10 Version 1809 for 32-bit Systems 10.0.17763.3532
- Windows 10 Version 1809 for ARM64-based Systems 10.0.17763.3532
- Windows 10 Version 1809 for x64-based Systems 10.0.17763.3532
- Windows Server 2019 10.0.17763.3532
- Windows Server 2019 (Server Core installation) 10.0.17763.3532
KB5018418
Security Update
- Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.1098
- Windows 11 version 21H2 for x64-based Systems 10.0.22000.1098
KB5018411
Security Update
- Windows 10 Version 1607 for 32-bit Systems 10.0.14393.5427
- Windows 10 Version 1607 for x64-based Systems 10.0.14393.5427
- Windows Server 2016 10.0.14393.5427
- Windows Server 2016 (Server Core installation) 10.0.14393.5427
KB5018410
Security Update
- Windows 10 Version 20H2 for 32-bit Systems 10.0.19042.2130
- Windows 10 Version 20H2 for ARM64-based Systems 10.0.19042.2130
- Windows 10 Version 21H1 for 32-bit Systems 10.0.19043.2130
- Windows 10 Version 21H1 for ARM64-based Systems 10.0.19043.2130
- Windows 10 Version 21H1 for x64-based Systems 10.0.19043.2130
- Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.2130
- Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.2130
- Windows 10 Version 21H2 for x64-based Systems 10.0.19044.2130

Vendor assessments

Microsoft

Microsoft's page for this CVE →

Impact: Elevation of Privilege
Exploited: No
Publicly disclosed: —
Exploitability: Exploitation More Likely

Timeline

2026-10-02 Threatist record created from CVE-2022-37997
2026-10-03 Alias added: GHSA-8g39-7r49-jcm2
2026-10-08 EPSS moved to the 50th–90th percentile

References

Patch 1

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37997

Advisory 1

Windows Graphics Component Elevation of Privilege Vulnerability

TI-2015-02132 Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft… KEVCVSS 3.1HIGH 8.8
TI-2022-10056 Remote Procedure Call Runtime Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
TI-2022-06273 HTTP Protocol Stack Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
TI-2019-00906 Remote Desktop Services Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
TI-2022-15533 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
TI-2015-01587 Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows… KEVCVSS 3.1MEDIUM 6.6

See all 2973 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences

Windows Graphics Component Elevation of Privilege Vulnerability

Key facts

Summary

Why it matters now

SSVC decision points

Affected products

CPE configurations NVD · 20

Remediation

Microsoft 15 updates

Vendor assessments

Microsoft

Timeline

References

Patch 1

Advisory 1

More Microsoft Windows 10 vulnerabilities

Sources