Skip to main content

Windows 11 CVE-2022-35804

HIGH
2022-08-09 secure@microsoft.com
8.8
CVSS 3.1 · Vendor: microsoft
Share

Severity by source

Vendor (microsoft) PRIMARY
8.8 HIGH
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Aug 09, 2022 - 20:15 cve.org
HIGH 8.8

DescriptionCVE.org

SMB Client and Server Remote Code Execution Vulnerability

AnalysisAI

SMB Client and Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

Affected products include: Microsoft Windows 11.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2023-21768 HIGH POC
7.8 Jan 10

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this

CVE-2021-40449 HIGH POC
7.8 Oct 13

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity

CVE-2022-32230 HIGH POC
7.5 Jun 14

Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch se

CVE-2023-21752 HIGH POC
7.1 Jan 10

Windows Backup Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low a

CVE-2022-34722 CRITICAL
9.8 Sep 13

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability. Rated critical severity (CV

CVE-2022-34721 CRITICAL
9.8 Sep 13

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability. Rated critical severity (CV

CVE-2022-34718 CRITICAL
9.8 Sep 13

Windows TCP/IP Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely e

CVE-2022-30133 CRITICAL
9.8 Aug 09

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vuln

CVE-2022-29130 CRITICAL
9.8 May 10

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated critical severity (CVSS

CVE-2022-22012 CRITICAL
9.8 May 10

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated critical severity (CVSS

CVE-2022-26809 CRITICAL
9.8 Apr 15

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerabilit

CVE-2022-24497 CRITICAL
9.8 Apr 15

Windows Network File System Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability

Share

CVE-2022-35804 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy