CVE-2022-30163

CVSS 3.1 Score 8.5 of 10 (high)

Details

Published Jun 15, 2022
Updated: Jan 2, 2025
CWE ID 362

Summary

CVE-2022-30163 is a remote code execution vulnerability affecting Microsoft Windows Hyper-V. Successful exploitation of this weakness allows an attacker to gain control of a Hyper-V host by sending specially crafted packets to a guest operating system. This can lead to the execution of arbitrary code and potential takeover of the host system. It is recommended that users apply the available Microsoft security updates as soon as possible to mitigate this risk. This vulnerability, designated as CVE-2022-30163, poses a significant threat to Windows Hyper-V systems. By sending targeted packets to a guest operating system, attackers can successfully execute arbitrary code on the host system, taking full control. Microsoft has released security updates to address the issue, and it is crucial for users to apply these patches promptly to protect their systems from potential exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows 7
  • Microsoft Windows Server 2012
  • Microsoft Windows Server 2016
  • Microsoft Windows 8.1
  • Microsoft Windows 10

Affected Vendors

  • Microsoft