CVE-2022-21907criticalexploração observada

CVE-2022-21907: falha crítica em Microsoft Windows 10 Version 1809

HTTP Protocol Stack Remote Code Execution Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Windows Server+ Monitorar Windows

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

97Vexday Risk Score

Priorize a correção. Ela exploração observada pelo VulnCheck e tem prova de conceito pública.

ssvc Actcvss 9.8epss 93%
da publicação à armano mesmo dia
Publicada no NVD11 de jan.
1ª PoC11 de jan.
VulnCheck+847d
HTTP Protocol Stack Remote Code Execution Vulnerability
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 20H2Microsoft · Windows 10 Version 21H1Microsoft · Windows 10 Version 21H2Microsoft · Windows 11 version 21H2Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server 2022Microsoft · Windows Server version 20H2
PoCs públicas encontradas — 33
exploitdbwww.exploit-db.com/exploits/51575não verificadogithubgithub.com/ZZ-SOCMAP/CVE-2022-21907★ 358githubgithub.com/polakow/CVE-2022-21907★ 126githubgithub.com/p0dalirius/CVE-2022-21907-http.sys★ 82githubgithub.com/michelep/CVE-2022-21907-Vulnerability-PoC★ 28githubgithub.com/mauricelambert/CVE-2022-21907★ 26githubgithub.com/Malwareman007/CVE-2022-21907★ 17githubgithub.com/0xmaximus/Home-Demolisher★ 8githubgithub.com/corelight/cve-2022-21907★ 5githubgithub.com/gpiechnik2/nmap-CVE-2022-21907★ 2githubgithub.com/iveresk/cve-2022-21907★ 1githubgithub.com/kamal-marouane/CVE-2022-21907★ 1githubgithub.com/iveresk/cve-2022-21907-http.sys★ 1githubgithub.com/asepsaepdin/CVE-2022-21907★ 0githubgithub.com/cassie0206/CVE-2022-21907★ 0githubgithub.com/EzoomE/CVE-2022-21907-RCE★ 0githubgithub.com/siboy17/CVE-2022-21907-http.sys★ 0vulncheckvulncheck.com/xdb/97f9744d0de9não verificadocve_referencepacketstormsecurity.com/files/166730/Microsoft-HTTP-Protocol-Stack-Denial-Of-Service.htmlnão verificadovulncheckvulncheck.com/xdb/1306e5fc35fbnão verificadovulncheckvulncheck.com/xdb/f31e1149e743não verificadovulncheckvulncheck.com/xdb/837d27449c0anão verificadovulncheckvulncheck.com/xdb/8444bab2f56fnão verificadovulncheckvulncheck.com/xdb/86fb978ad867não verificadovulncheckvulncheck.com/xdb/65a99dd97dd6não verificadovulncheckvulncheck.com/xdb/2590a1a4a8efnão verificadovulncheckvulncheck.com/xdb/167adf17e68cnão verificadovulncheckvulncheck.com/xdb/9e5b11d4061dnão verificadovulncheckvulncheck.com/xdb/d5f3de9489d0não verificadovulncheckvulncheck.com/xdb/8d7c3f5c3e4cnão verificadovulncheckvulncheck.com/xdb/bb7d8819859enão verificadovulncheckvulncheck.com/xdb/7b2e370d77d9não verificadovulncheckvulncheck.com/xdb/79c1d5825bd3não verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Microsoft Windows 10 Version 1809

No mesmo produto, das mais perigosas para as menos.

CVE-2021-31166CRITICALHTTP Protocol Stack Remote Code Execution VulnerabilityEPSS 99.9%KEVCVE-2021-34527HIGHWindows Print Spooler Remote Code Execution VulnerabilityEPSS 99.8%KEVCVE-2023-36884HIGHWindows Search Remote Code Execution VulnerabilityEPSS 99.4%KEVCVE-2024-21412HIGHInternet Shortcut Files Security Feature Bypass VulnerabilityEPSS 99.4%KEVCVE-2022-30190HIGHMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityEPSS 99.2%KEVCVE-2021-40444HIGHMicrosoft MSHTML Remote Code Execution VulnerabilityEPSS 97.8%KEV