7.8

CVE-2022-21852

Windows DWM Core Library Elevation of Privilege Vulnerability

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 Version20h2 HwPlatformarm64
Microsoft ≫ Windows 10 Version20h2 HwPlatformx64
Microsoft ≫ Windows 10 Version20h2 HwPlatformx86
Microsoft ≫ Windows 10 Version21h1 HwPlatformarm64
Microsoft ≫ Windows 10 Version21h1 HwPlatformx64
Microsoft ≫ Windows 10 Version21h1 HwPlatformx86
Microsoft ≫ Windows 10 Version21h2 HwPlatformarm64
Microsoft ≫ Windows 10 Version21h2 HwPlatformx64
Microsoft ≫ Windows 10 Version21h2 HwPlatformx86
Microsoft ≫ Windows 10 Version1809 HwPlatformarm64
Microsoft ≫ Windows 10 Version1809 HwPlatformx64
Microsoft ≫ Windows 10 Version1809 HwPlatformx86
Microsoft ≫ Windows 10 Version1909 HwPlatformarm64
Microsoft ≫ Windows 10 Version1909 HwPlatformx64
Microsoft ≫ Windows 10 Version1909 HwPlatformx86
Microsoft ≫ Windows 11 Version- HwPlatformarm64
Microsoft ≫ Windows 11 Version- HwPlatformx64
Microsoft ≫ Windows Server Version20h2
Microsoft ≫ Windows Server Version2022
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.56% 0.655
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
secure@microsoft.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.