CVE-2022-37985
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2022-37985 is a Windows Graphics Component information disclosure vulnerability. An attacker who successfully exploits this vulnerability can gain unauthorized access to sensitive information. The issue stems from a flaw in the way the component handles certain graphic files, allowing an attacker to extract data from system memory. Microsoft has released a patch to address this vulnerability, and it is recommended that all Windows users install the update as soon as possible to protect against potential attacks. This issue could lead to significant data leaks and should be taken seriously.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows 7
- Microsoft Windows Server 2008
- Microsoft Windows 10
- Microsoft Windows Server 2012
- Microsoft Windows 8.1
Affected Vendors
- Microsoft