CVE-2022-23257

EUVD-2022-28344
Windows Hyper-V Remote Code Execution Vulnerability
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
microsoftCNA
8.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_11
-
microsoftwindows_server_2022
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
21H1 (x64)
KB5012599
21H2 (x64)
KB5012599
Windows 11
21H2 (x64)
KB5012592
22H2 (x64)
KB5023706
Windows Server
20H2 Server Core
KB5012599
Windows Server 2022
Server Core
KB5012604
Standard
KB5012604
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23257
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23257