Netskope Threat Labs

OS-WINDOWS Microsoft Windows Advanced Local Procedure Call elevation of privilege attempt

IPS-SWG

2 SIDs: 59972, 60199

Description

Detects an attempt to exploit CVE-2022-30202 and CVE-2022-30160, a privilege escalation flaw that can grant higher access in Microsoft Windows Advanced Local Procedure Call.

CVEs

CVE-2022-30160CVE-2022-30202

Related malware families

Microsoft

References