CVE:CVE-2022-38016
CNNVD:CNNVD-202210-476
Microsoft Windows Local Security Authority Subsystem Service是美国微软（Microsoft）公司的一个内部程序，负责运行Windows系统安全政策。它在用户登录时电脑单机或服务器时，验证用户身份，管理用户密码变更，并产生访问字符。它也会在窗口安全日志中留下应有的记录。
Microsoft Windows Local Security Authority (LSA)存在安全漏洞。以下产品和版本受到影响：Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-based Systems,Windows 10 Version 21H1 for 32-bit Systems,Windows Server 2022,Windows Server 2022 (Server Core installation),Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2 for ARM64-based Systems,Windows 11 for x64-based Systems,Windows 11 for ARM64-based Systems,Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems,Windows 11 Version 22H2 for ARM64-based Systems,Windows 11 Version 22H2 for x64-based Systems。
solution:Upgrade microsoft windows_10 to a higher version than 20h2,21h1,21h2,1607,1809,and avoid the version 20h2,21h1,21h2,1607,1809; Upgrade microsoft windows_11 to a higher version than -,22h2,and avoid the version 22h2; Upgrade microsoft windows_server_2019 to a higher version than -; Upgrade microsoft windows_server_2022 to a higher version than -