Skip to main content

Windows 11 CVE-2022-34723

MEDIUM
2022-09-13 secure@microsoft.com
5.5
CVSS 3.1 · Vendor: microsoft
Share

Severity by source

Vendor (microsoft) PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Sep 13, 2022 - 19:15 cve.org
MEDIUM 5.5

DescriptionCVE.org

Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability

AnalysisAI

Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability Affected products include: Microsoft Windows 11.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2023-21768 HIGH POC
7.8 Jan 10

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this

CVE-2021-40449 HIGH POC
7.8 Oct 13

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity

CVE-2022-32230 HIGH POC
7.5 Jun 14

Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch se

CVE-2023-21752 HIGH POC
7.1 Jan 10

Windows Backup Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low a

CVE-2022-34722 CRITICAL
9.8 Sep 13

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability. Rated critical severity (CV

CVE-2022-34721 CRITICAL
9.8 Sep 13

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability. Rated critical severity (CV

CVE-2022-34718 CRITICAL
9.8 Sep 13

Windows TCP/IP Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely e

CVE-2022-30133 CRITICAL
9.8 Aug 09

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vuln

CVE-2022-29130 CRITICAL
9.8 May 10

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated critical severity (CVSS

CVE-2022-22012 CRITICAL
9.8 May 10

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated critical severity (CVSS

CVE-2022-26809 CRITICAL
9.8 Apr 15

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerabilit

CVE-2022-24497 CRITICAL
9.8 Apr 15

Windows Network File System Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability

Share

CVE-2022-34723 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy