Actively exploited in the wild

Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

Microsoft - Windows COM+ Event System Service · Listed in the CISA KEV since 2022-10-11. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2022-41033

HighCVSS 7.8KEV

Published: 11/10/2022(UTC)Updated: 17/06/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Summary

A vulnerability in the Windows COM+ Event System Service allows for elevation of privilege. Technical details are not provided in the description.

An attacker with local access could exploit this vulnerability to elevate privileges on a Windows system. This could lead to system compromise.

Apply the security updates provided by Microsoft for Windows. Regularly update systems to protect against known vulnerabilities.

Original NVD description (English source)

Windows COM+ Event System Service Elevation of Privilege Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS