[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frJtWkpxUcj9bps9Vuye9xfpSNSBkRHSfG6Px9fXqWEw":3,"g5a-risk:CVE-2022-38775":118},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":47,"references":48,"referencesCount":61,"weaknesses":62,"weaknessesCount":71,"isActivelyExploited":72,"cisaInfo":26,"otxData":26,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":113,"notableEvents":114},"CVE-2022-38775","What is CVE-2022-38775?","An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.","An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to...","2023-01-26T21:15:50.3","2025-04-02T14:15:36.48",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00255,[33,33,33,33,33,33,33],"High",[37,42],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"elastic","endpoint_security","*","cpe:2.3:a:elastic:endpoint_security:*:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",2,[49,54,57,59],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fdiscuss.elastic.co\u002Ft\u002Fendpoint-security-8-4-1-security-statement\u002F323753","Elastic",[53],"Vendor Advisory",{"url":55,"source":51,"tags":56},"https:\u002F\u002Fwww.elastic.co\u002Fcommunity\u002Fsecurity",[53],{"url":50,"source":51,"tags":58},[53],{"url":55,"source":51,"tags":60},[53],4,[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",1,false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2022-38775? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-38775, a high severity cyber security vulnerability from 2023. An issue was discovered in the rollback feature of Elastic ...","CVE-2022-38775, CVE-2022-38775 vulnerability, CVE-2022-38775 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, elastic security, microsoft security, endpoint_security vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2022-38775",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-38775","Cybersecurity","CVE-2022-38775, CVE-2022-38775 vulnerability, CVE-2022-38775 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":101,"Negate":26,"Nodes":102},"AND",[103,109],{"Operator":104,"Negate":26,"CPEMatch":105},"OR",[106],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":107,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":108,"VersionEndIncluding":26},"1ABC1C7E-ED5A-4751-82B8-F58B4A3F2C8E","8.4.1",{"Operator":104,"Negate":26,"CPEMatch":110},[111],{"Vulnerable":26,"Criteria":46,"MatchCriteriaID":112,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":11,"cacheTime":116,"version":117},1792260446694,"2.0",{"score":119,"band":120,"action":121,"scoredAt":122},46,"Medium","Plan remediation","2026-10-16T06:56:58.31407+00:00"]