Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2022-29113

Опубликовано: 10 мая 2022
Источник: msrc
CVSS3: 7.8
EPSS Низкий

Описание

Windows Digital Media Receiver Elevation of Privilege Vulnerability

FAQ

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to win a race condition.

According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?

In this case, a successful attack could be performed from a low privilege AppContainer. The attacker could elevate their privileges and execute code or access resources at a higher integrity level than that of the AppContainer execution environment.

Обновления

ПродуктСтатьяОбновление
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows 10 Version 1909 for 32-bit Systems
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1909 for ARM64-based Systems
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for ARM64-based Systems

Показывать по

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 49%
0.00258
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
nvd
около 3 лет назад

Windows Digital Media Receiver Elevation of Privilege Vulnerability

CVSS3: 7.8
github
около 3 лет назад

Windows Digital Media Receiver Elevation of Privilege Vulnerability.

CVSS3: 7.8
fstec
около 3 лет назад

Уязвимость компонента Windows Digital Media Receiver операционной системы Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 49%
0.00258
Низкий

7.8 High

CVSS3