CVE-2022-21907criticalobserved exploitation

CVE-2022-21907: critical vulnerability in Microsoft Windows 10 Version 1809

HTTP Protocol Stack Remote Code Execution Vulnerability

Published · Updated

Follow this CVE+ Monitor Windows Server+ Monitor Windows

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

97Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 9.8epss 93%
from disclosure to weaponsame day
Published on NVDJan 11
1st PoCJan 11
VulnCheck+847d
HTTP Protocol Stack Remote Code Execution Vulnerability
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 20H2Microsoft · Windows 10 Version 21H1Microsoft · Windows 10 Version 21H2Microsoft · Windows 11 version 21H2Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server 2022Microsoft · Windows Server version 20H2
public PoCs found — 33
exploitdbwww.exploit-db.com/exploits/51575unverifiedgithubgithub.com/ZZ-SOCMAP/CVE-2022-21907★ 358githubgithub.com/polakow/CVE-2022-21907★ 126githubgithub.com/p0dalirius/CVE-2022-21907-http.sys★ 82githubgithub.com/michelep/CVE-2022-21907-Vulnerability-PoC★ 28githubgithub.com/mauricelambert/CVE-2022-21907★ 26githubgithub.com/Malwareman007/CVE-2022-21907★ 17githubgithub.com/0xmaximus/Home-Demolisher★ 8githubgithub.com/corelight/cve-2022-21907★ 5githubgithub.com/gpiechnik2/nmap-CVE-2022-21907★ 2githubgithub.com/iveresk/cve-2022-21907★ 1githubgithub.com/kamal-marouane/CVE-2022-21907★ 1githubgithub.com/iveresk/cve-2022-21907-http.sys★ 1githubgithub.com/asepsaepdin/CVE-2022-21907★ 0githubgithub.com/cassie0206/CVE-2022-21907★ 0githubgithub.com/EzoomE/CVE-2022-21907-RCE★ 0githubgithub.com/siboy17/CVE-2022-21907-http.sys★ 0vulncheckvulncheck.com/xdb/97f9744d0de9unverifiedcve_referencepacketstormsecurity.com/files/166730/Microsoft-HTTP-Protocol-Stack-Denial-Of-Service.htmlunverifiedvulncheckvulncheck.com/xdb/1306e5fc35fbunverifiedvulncheckvulncheck.com/xdb/f31e1149e743unverifiedvulncheckvulncheck.com/xdb/837d27449c0aunverifiedvulncheckvulncheck.com/xdb/8444bab2f56funverifiedvulncheckvulncheck.com/xdb/86fb978ad867unverifiedvulncheckvulncheck.com/xdb/65a99dd97dd6unverifiedvulncheckvulncheck.com/xdb/2590a1a4a8efunverifiedvulncheckvulncheck.com/xdb/167adf17e68cunverifiedvulncheckvulncheck.com/xdb/9e5b11d4061dunverifiedvulncheckvulncheck.com/xdb/d5f3de9489d0unverifiedvulncheckvulncheck.com/xdb/8d7c3f5c3e4cunverifiedvulncheckvulncheck.com/xdb/bb7d8819859eunverifiedvulncheckvulncheck.com/xdb/7b2e370d77d9unverifiedvulncheckvulncheck.com/xdb/79c1d5825bd3unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Microsoft Windows 10 Version 1809

In the same product, most dangerous first.

CVE-2021-31166CRITICALHTTP Protocol Stack Remote Code Execution VulnerabilityEPSS 99.9%KEVCVE-2021-34527HIGHWindows Print Spooler Remote Code Execution VulnerabilityEPSS 99.8%KEVCVE-2023-36884HIGHWindows Search Remote Code Execution VulnerabilityEPSS 99.4%KEVCVE-2024-21412HIGHInternet Shortcut Files Security Feature Bypass VulnerabilityEPSS 99.4%KEVCVE-2022-30190HIGHMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityEPSS 99.2%KEVCVE-2021-40444HIGHMicrosoft MSHTML Remote Code Execution VulnerabilityEPSS 97.8%KEV