CVE Watchtower

← Back to CVE List

CVE-2022-38028NVD

Vulnerability Summary

No description available
Severity Level
HIGH(7.8)
Published Date
Oct 11, 2022
Last Modified
Jan 12, 2026
Exploitation Status
ACTIVE
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
N/A
CVSS v3.1 Base Metrics — Score 7.8 (HIGH)
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

Affected & Patched Versions

Affected Versions
  • Microsoft Windows 10 Version 1809 >= 10.0.17763.0 and < 10.0.17763.3532
  • Microsoft Windows 10 Version 1809 >= 10.0.0 and < 10.0.17763.3532
  • Microsoft Windows Server 2019 >= 10.0.17763.0 and < 10.0.17763.3532
  • Microsoft Windows Server 2019 (Server Core installation) >= 10.0.17763.0 and < 10.0.17763.3532
  • Microsoft Windows 10 Version 21H1 >= 10.0.0 and < 10.0.19043.2130
  • Microsoft Windows Server 2022 >= 10.0.20348.0 and < 10.0.20348.1129
  • Microsoft Windows 10 Version 20H2 >= 10.0.0 and < 10.0.19042.2130
  • Microsoft Windows 11 version 21H2 >= 10.0.0 and < 10.0.22000.1098
  • Microsoft Windows 10 Version 21H2 >= 10.0.19043.0 and < 10.0.19044.2130
  • Microsoft Windows 11 version 22H2 >= 10.0.22621.0 and < 10.0.22621.674
  • Microsoft Windows 10 Version 1507 >= 10.0.10240.0 and < 10.0.10240.19507
  • Microsoft Windows 10 Version 1607 >= 10.0.14393.0 and < 10.0.14393.5427
  • Microsoft Windows Server 2016 >= 10.0.14393.0 and < 10.0.14393.5427
  • Microsoft Windows Server 2016 (Server Core installation) >= 10.0.14393.0 and < 10.0.14393.5427
  • Microsoft Windows 8.1 >= 6.3.0 and < 6.3.9600.20625
  • Microsoft Windows Server 2012 >= 6.2.9200.0 and < 6.2.9200.23920
  • Microsoft Windows Server 2012 (Server Core installation) >= 6.2.9200.0 and < 6.2.9200.23920
  • Microsoft Windows Server 2012 R2 >= 6.3.9600.0 and < 6.3.9600.20625
  • Microsoft Windows Server 2012 R2 (Server Core installation) >= 6.3.9600.0 and < 6.3.9600.20625
Patched Versions
  • Microsoft Windows 10 Version 1809 10.0.17763.3532
  • Microsoft Windows Server 2019 10.0.17763.3532
  • Microsoft Windows Server 2019 (Server Core installation) 10.0.17763.3532
  • Microsoft Windows 10 Version 21H1 10.0.19043.2130
  • Microsoft Windows Server 2022 10.0.20348.1129
  • Microsoft Windows 10 Version 20H2 10.0.19042.2130
  • Microsoft Windows 11 version 21H2 10.0.22000.1098
  • Microsoft Windows 10 Version 21H2 10.0.19044.2130
  • Microsoft Windows 11 version 22H2 10.0.22621.674
  • Microsoft Windows 10 Version 1507 10.0.10240.19507
  • Microsoft Windows 10 Version 1607 10.0.14393.5427
  • Microsoft Windows Server 2016 10.0.14393.5427
  • Microsoft Windows Server 2016 (Server Core installation) 10.0.14393.5427
  • Microsoft Windows 8.1 6.3.9600.20625
  • Microsoft Windows Server 2012 6.2.9200.23920
  • Microsoft Windows Server 2012 (Server Core installation) 6.2.9200.23920
  • Microsoft Windows Server 2012 R2 6.3.9600.20625
  • Microsoft Windows Server 2012 R2 (Server Core installation) 6.3.9600.20625
🎁7-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.
🎁7-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.