CVE-2022-29112
CVSS 2.0 Score 4.3 of 10 (medium)
Details
Summary
CVE-2022-29112 is a new Windows Graphics Component information disclosure vulnerability. Maliciously crafted graphics files can cause the component to leak sensitive information, potentially leading to unauthorized access or privilege escalation. An attacker could exploit this vulnerability by persuading a user to open a specially crafted graphics file. Microsoft has released a patch to address the issue, and users are encouraged to apply it as soon as possible to protect against potential attacks. The disclosure of this information could allow an attacker to gain insight into the target system, potentially facilitating further exploits.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows 7
- Microsoft Windows 10
- Microsoft Windows Server 2012
- Microsoft Windows 8.1
- Microsoft Windows Server 2016
Affected Vendors
- Microsoft