CVE-2022-41120

SysmonEoP Proof of Concept for arbitrary file delete/write in Sysmon (CVE-2022-41120/CVE-2022-XXXXX) Vulnerability Vulnerability is in code responsible for ClipboardChange event that can be reached through RPC Local users can send data to RPC server which will then be written in C:\Sysmon directory (default ArchiveDirectory) and deleted afterwards In version before 1411 Sysm

CVE-2022-41120 Microsoft Windows Sysmon Elevation of Privilege Vulnerability authentication complexity vector not available not available not available confidentiality integrity availability not available not available not available CVSS Score: not available References portalmsrcmicrosoftcom/en-US/security-guidance/advisory/CVE-2022-41120 Brut

Sysinternals Archive This repository performs automated archiving of the Sysinternals utilities as only the latest version can be obtained from official sources Tool versions are tagged accordingly This repository is neither owned, maintained nor endorsed by Microsoft, Mark Russinovich or Sysinternals All utilities, assets, logos and rights belong to their respective owners