CVE-2022-37985

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Oct 11, 2022
Updated: Jan 2, 2025

Summary

CVE-2022-37985 is a Windows Graphics Component information disclosure vulnerability. An attacker who successfully exploits this vulnerability can gain unauthorized access to sensitive information. The issue stems from a flaw in the way the component handles certain graphic files, allowing an attacker to extract data from system memory. Microsoft has released a patch to address this vulnerability, and it is recommended that all Windows users install the update as soon as possible to protect against potential attacks. This issue could lead to significant data leaks and should be taken seriously.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows 7
  • Microsoft Windows Server 2008
  • Microsoft Windows 10
  • Microsoft Windows Server 2012
  • Microsoft Windows 8.1

Affected Vendors

  • Microsoft