CVE-2022-23293 - Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

Back Back to CVE browser

HIGH

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

Published Mar 9, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.67%

Description

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

Affected products

Vendor Microsoft Product Windows 10 Version 1507 Default
n/a
- Version
  10.0.10240.0
  Status
  affected
  Constraints
  <10.0.10240.19235
Vendor Microsoft Product Windows 10 Version 1607 Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.5006
Vendor Microsoft Product Windows 10 Version 1809 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.17763.2686
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.2686
Vendor Microsoft Product Windows 10 Version 1909 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.18363.2158
Vendor Microsoft Product Windows 10 Version 20H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.19042.1586
Vendor Microsoft Product Windows 10 Version 21H1 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.19043.1586
Vendor Microsoft Product Windows 10 Version 21H2 Default
n/a
- Version
  10.0.19043.0
  Status
  affected
  Constraints
  <10.0.19044.1586
Vendor Microsoft Product Windows 11 version 21H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.22000.556
Vendor Microsoft Product Windows 7 Default
n/a
- Version
  6.1.0
  Status
  affected
  Constraints
  <6.1.7601.25898
Vendor Microsoft Product Windows 7 Service Pack 1 Default
n/a
- Version
  6.1.0
  Status
  affected
  Constraints
  <6.1.7601.25898
Vendor Microsoft Product Windows 8.1 Default
n/a
- Version
  6.3.0
  Status
  affected
  Constraints
  <6.3.9600.20303
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
n/a
- Version
  6.0.6003.0
  Status
  affected
  Constraints
  <6.0.6003.21416
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 Default
n/a
- Version
  6.1.7601.0
  Status
  affected
  Constraints
  <6.1.7601.25898
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 (Server Core installation) Default
n/a
- Version
  6.1.7601.0
  Status
  affected
  Constraints
  <6.1.7601.25898
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
n/a
- Version
  6.0.6003.0
  Status
  affected
  Constraints
  <6.0.6003.21416
Vendor Microsoft Product Windows Server 2008 Service Pack 2 (Server Core installation) Default
n/a
- Version
  6.0.6003.0
  Status
  affected
  Constraints
  <6.0.6003.21416
Vendor Microsoft Product Windows Server 2012 Default
n/a
- Version
  6.2.9200.0
  Status
  affected
  Constraints
  <6.2.9200.23645
Vendor Microsoft Product Windows Server 2012 (Server Core installation) Default
n/a
- Version
  6.2.9200.0
  Status
  affected
  Constraints
  <6.2.9200.23645
Vendor Microsoft Product Windows Server 2012 R2 Default
n/a
- Version
  6.3.9600.0
  Status
  affected
  Constraints
  <6.3.9600.20303
Vendor Microsoft Product Windows Server 2012 R2 (Server Core installation) Default
n/a
- Version
  6.3.9600.0
  Status
  affected
  Constraints
  <6.3.9600.20303
Vendor Microsoft Product Windows Server 2016 Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.5006
Vendor Microsoft Product Windows Server 2016 (Server Core installation) Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.5006
Vendor Microsoft Product Windows Server 2019 Default
n/a
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.2686
Vendor Microsoft Product Windows Server 2019 (Server Core installation) Default
n/a
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.2686
Vendor Microsoft Product Windows Server 2022 Default
n/a
- Version
  10.0.20348.0
  Status
  affected
  Constraints
  <10.0.20348.587
Vendor Microsoft Product Windows Server version 20H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.19042.1586

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows 10 Version 1507

n/a

Version	Status	Constraints
10.0.10240.0	affected	<10.0.10240.19235

Microsoft

Windows 10 Version 1607

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.5006

Microsoft

Windows 10 Version 1809

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.17763.2686
10.0.17763.0	affected	<10.0.17763.2686

Microsoft

Windows 10 Version 1909

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.18363.2158

Microsoft

Windows 10 Version 20H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.19042.1586

Microsoft

Windows 10 Version 21H1

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.19043.1586

Microsoft

Windows 10 Version 21H2

n/a

Version	Status	Constraints
10.0.19043.0	affected	<10.0.19044.1586

Microsoft

Windows 11 version 21H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.22000.556

Microsoft

Windows 7

n/a

Version	Status	Constraints
6.1.0	affected	<6.1.7601.25898

Microsoft

Windows 7 Service Pack 1

n/a

Version	Status	Constraints
6.1.0	affected	<6.1.7601.25898

Microsoft

Windows 8.1

n/a

Version	Status	Constraints
6.3.0	affected	<6.3.9600.20303

Microsoft

Windows Server 2008 Service Pack 2

n/a

Version	Status	Constraints
6.0.6003.0	affected	<6.0.6003.21416

Microsoft

Windows Server 2008 R2 Service Pack 1

n/a

Version	Status	Constraints
6.1.7601.0	affected	<6.1.7601.25898

Microsoft

Windows Server 2008 R2 Service Pack 1 (Server Core installation)

n/a

Version	Status	Constraints
6.1.7601.0	affected	<6.1.7601.25898

Microsoft

Windows Server 2008 Service Pack 2

n/a

Version	Status	Constraints
6.0.6003.0	affected	<6.0.6003.21416

Microsoft

Windows Server 2008 Service Pack 2 (Server Core installation)

n/a

Version	Status	Constraints
6.0.6003.0	affected	<6.0.6003.21416

Microsoft

Windows Server 2012

n/a

Version	Status	Constraints
6.2.9200.0	affected	<6.2.9200.23645

Microsoft

Windows Server 2012 (Server Core installation)

n/a

Version	Status	Constraints
6.2.9200.0	affected	<6.2.9200.23645

Microsoft

Windows Server 2012 R2

n/a

Version	Status	Constraints
6.3.9600.0	affected	<6.3.9600.20303

Microsoft

Windows Server 2012 R2 (Server Core installation)

n/a

Version	Status	Constraints
6.3.9600.0	affected	<6.3.9600.20303

Microsoft

Windows Server 2016

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.5006

Microsoft

Windows Server 2016 (Server Core installation)

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.5006

Microsoft

Windows Server 2019

n/a

Version	Status	Constraints
10.0.17763.0	affected	<10.0.17763.2686

Microsoft

Windows Server 2019 (Server Core installation)

n/a

Version	Status	Constraints
10.0.17763.0	affected	<10.0.17763.2686

Microsoft

Windows Server 2022

n/a

Version	Status	Constraints
10.0.20348.0	affected	<10.0.20348.587

Microsoft

Windows Server version 20H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.19042.1586

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-28379
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23293
vendor-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-28379		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23293		vendor-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Mar 9, 2022

Updated Jul 8, 2025

Reserved Jan 15, 2022

Link CVE-2022-23293

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-23293

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-23293

ENISA EUVD

Assigner microsoft

Published Mar 9, 2022

Updated Jul 8, 2025

Exploited since n/a

Link EUVD-2022-28379

EUVD-2022-28379