[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbW2clkUVVzhUv_oVPsv6Mth3-4GZb5pAOme5_1zpdb4":3,"g5a-risk:CVE-2022-38777":129},{"success":4,"data":5,"meta":126},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":50,"references":51,"referencesCount":65,"weaknesses":66,"weaknessesCount":75,"isActivelyExploited":76,"cisaInfo":26,"otxData":26,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":124,"notableEvents":125},"CVE-2022-38777","What is CVE-2022-38777?","An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.","An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to...","2023-02-08T21:15:10.503","2025-03-25T15:15:14.447",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00255,[33,33,33,33,33,33,33],"High",[37,42,45],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"elastic","endgame","*","cpe:2.3:a:elastic:endgame:*:*:*:*:*:*:*:*",{"vendor":38,"product":43,"version":40,"criteria":44,"vulnerable":4},"endpoint_security","cpe:2.3:a:elastic:endpoint_security:*:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",3,[52,58,61,63],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fdiscuss.elastic.co\u002Ft\u002Felastic-7-17-9-8-5-0-and-8-6-1-security-update\u002F324661","Elastic",[56,57],"Release Notes","Vendor Advisory",{"url":59,"source":54,"tags":60},"https:\u002F\u002Fwww.elastic.co\u002Fcommunity\u002Fsecurity",[57],{"url":53,"source":54,"tags":62},[56,57],{"url":59,"source":54,"tags":64},[57],4,[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",1,false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2022-38777? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-38777, a high severity cyber security vulnerability from 2023. An issue was discovered in the rollback feature of Elastic ...","CVE-2022-38777, CVE-2022-38777 vulnerability, CVE-2022-38777 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, elastic security, microsoft security, endgame vulnerability, endpoint_security vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2022-38777",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-38777","Cybersecurity","CVE-2022-38777, CVE-2022-38777 vulnerability, CVE-2022-38777 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":105,"Negate":26,"Nodes":106},"AND",[107,120],{"Operator":108,"Negate":26,"CPEMatch":109},"OR",[110,113,116],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":111,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":112,"VersionEndIncluding":26},"82E166AF-B59A-47DA-AF08-58B413760F32","3.62.3",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":114,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":115,"VersionEndIncluding":26},"037B93AE-E430-4DA3-8992-7F600B4F9E9D","7.17.9",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":118,"VersionEndExcluding":119,"VersionEndIncluding":26},"3893D547-FC5C-4FB5-B038-FF211002DCE6","8.0.0","8.5.0",{"Operator":108,"Negate":26,"CPEMatch":121},[122],{"Vulnerable":26,"Criteria":49,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":11,"cacheTime":127,"version":128},1792260437033,"2.0",{"score":130,"band":131,"action":132,"scoredAt":133},45,"Medium","Plan remediation","2026-10-16T06:57:05.552867+00:00"]