CVE-2022-29113

CVSS 2.0 Score 4.4 of 10 (medium)

Details

Published May 10, 2022
Updated: Jan 2, 2025
CWE ID 362

Summary

CVE-2022-29113 is a critical elevation of privilege vulnerability affecting Windows Digital Media Receiver. An attacker who successfully exploits this vulnerability can gain administrative control over an affected system. This issue arises due to insufficient access control checks in the software, allowing unauthenticated users to execute arbitrary code. Systems with the Digital Media Receiver feature enabled are at risk. It is highly recommended that affected organizations install the available Microsoft patch as soon as possible to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows 10
  • Microsoft Windows Server 2019
  • Microsoft Windows 11
  • Microsoft Windows Server

Affected Vendors

  • Microsoft