CVE-2022-29112

CVSS 2.0 Score 4.3 of 10 (medium)

Details

Published May 10, 2022
Updated: Jan 2, 2025

Summary

CVE-2022-29112 is a new Windows Graphics Component information disclosure vulnerability. Maliciously crafted graphics files can cause the component to leak sensitive information, potentially leading to unauthorized access or privilege escalation. An attacker could exploit this vulnerability by persuading a user to open a specially crafted graphics file. Microsoft has released a patch to address the issue, and users are encouraged to apply it as soon as possible to protect against potential attacks. The disclosure of this information could allow an attacker to gain insight into the target system, potentially facilitating further exploits.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows 7
  • Microsoft Windows 10
  • Microsoft Windows Server 2012
  • Microsoft Windows 8.1
  • Microsoft Windows Server 2016

Affected Vendors

  • Microsoft