What is the CVSS score of CVE-2022-41076?

CVE-2022-41076 has a CVSS 3.1 base score of 8.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 61.6%.

Is there a patch available for CVE-2022-41076?

Yes, a patch is available for CVE-2022-41076. Update the affected software to the latest version immediately.

Powershell CVE-2022-41076

HIGH

2022-12-13 secure@microsoft.com

RCE Powershell Windows 10 Windows 11 Windows 7 Windows 8 1 Windows Rt 8 1 Windows Server 2008 Windows Server 2012 Windows Server 2016 Windows Server 2019 Windows Server 2022

8.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.5 HIGH

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Dec 13, 2022 - 19:15 nvd

HIGH 8.5

DescriptionNVD

PowerShell Remote Code Execution Vulnerability

AnalysisAI

PowerShell Remote Code Execution Vulnerability. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable.

Technical ContextAI

Affected products include: Microsoft Powershell, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows 7, Microsoft Windows 8.1.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Powershell

View all

CVE-2018-8327 CRITICAL Act Now

9.8 Jul 11

A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code

CVE-2022-41121 HIGH This Week

7.8 Dec 13

Windows Graphics Component Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is l

CVE-2022-26788 HIGH This Week

7.8 Apr 15

PowerShell Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack comple

CVE-2025-30399 HIGH This Week

7.5 Jun 13

CVE-2025-30399 is an untrusted search path vulnerability in .NET and Visual Studio that allows unauthenticated remote at

CVE-2023-21538 HIGH This Week

7.5 Jan 10

.NET Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no aut

CVE-2022-23267 HIGH This Week

7.5 May 10

.NET and Visual Studio Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely e

CVE-2020-1108 HIGH This Week

7.5 May 21

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Cor

CVE-2020-0951 MEDIUM This Month

6.7 Sep 11

<p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an at

CVE-2023-36013 MEDIUM This Month

6.5 Nov 20

PowerShell Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploi

CVE-2020-8927 MEDIUM This Month

6.5 Sep 15

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of

CVE-2022-24512 MEDIUM This Month

6.3 Mar 09

.NET and Visual Studio Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.3), this vulnerability is remo

CVE-2022-34716 MEDIUM This Month

5.9 Aug 09

.NET Spoofing Vulnerability. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentica

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2016-4117 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2025-53770 CRITICAL POC

9.8

CVE-2020-7961 CRITICAL POC

9.8

CVE-2022-41076 vulnerability details – vuln.today

Back

Powershell CVE-2022-41076

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More in Powershell

Same technique RCE

Share

External POC / Exploit Code