Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2022-21921 (GCVE-0-2022-21921)
Vulnerability from cvelistv5 – Published: 2022-01-11 20:23 – Updated: 2025-01-02 18:22
VLAI
EPSS
Title
Windows Defender Credential Guard Security Feature Bypass Vulnerability
Summary
Windows Defender Credential Guard Security Feature Bypass Vulnerability
Severity
CWE
- Security Feature Bypass
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisory |
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Windows 10 Version 21H1 |
Affected:
10.0.0 , < 10.0.19043.1466
(custom)
|
|
| Microsoft | Windows Server 2022 |
Affected:
10.0.20348.0 , < 10.0.20348.469
(custom)
|
|
| Microsoft | Windows 10 Version 20H2 |
Affected:
10.0.0 , < 10.0.19042.1466
(custom)
|
|
| Microsoft | Windows Server version 20H2 |
Affected:
10.0.0 , < 10.0.19042.1466
(custom)
|
|
| Microsoft | Windows 11 version 21H2 |
Affected:
10.0.0 , < 10.0.22000.434
(custom)
|
|
| Microsoft | Windows 10 Version 21H2 |
Affected:
10.0.19043.0 , < 10.0.19043.1466
(custom)
|
Date Public
2022-01-11 08:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T03:00:53.880Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21921"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems",
"ARM64-based Systems",
"32-bit Systems"
],
"product": "Windows 10 Version 21H1",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.19043.1466",
"status": "affected",
"version": "10.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2022",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.20348.469",
"status": "affected",
"version": "10.0.20348.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"32-bit Systems",
"ARM64-based Systems"
],
"product": "Windows 10 Version 20H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.19042.1466",
"status": "affected",
"version": "10.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server version 20H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.19042.1466",
"status": "affected",
"version": "10.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems",
"ARM64-based Systems"
],
"product": "Windows 11 version 21H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.22000.434",
"status": "affected",
"version": "10.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"32-bit Systems",
"ARM64-based Systems",
"x64-based Systems"
],
"product": "Windows 10 Version 21H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.19043.1466",
"status": "affected",
"version": "10.0.19043.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21H1:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.19043.1466",
"versionStartIncluding": "10.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.20348.469",
"versionStartIncluding": "10.0.20348.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*",
"versionEndExcluding": "10.0.19042.1466",
"versionStartIncluding": "10.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19042.1466",
"versionStartIncluding": "10.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.22000.434",
"versionStartIncluding": "10.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
"versionEndExcluding": "10.0.19043.1466",
"versionStartIncluding": "10.0.19043.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2022-01-11T08:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Windows Defender Credential Guard Security Feature Bypass Vulnerability"
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Security Feature Bypass",
"lang": "en-US",
"type": "Impact"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-02T18:22:38.965Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Windows Defender Credential Guard Security Feature Bypass Vulnerability",
"tags": [
"vendor-advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21921"
}
],
"title": "Windows Defender Credential Guard Security Feature Bypass Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2022-21921",
"datePublished": "2022-01-11T20:23:20.000Z",
"dateReserved": "2021-12-14T00:00:00.000Z",
"dateUpdated": "2025-01-02T18:22:38.965Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2022-21921",
"date": "2026-05-31",
"epss": "0.01677",
"percentile": "0.82472"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:arm64:*\", \"matchCriteriaId\": \"610B33F9-0309-4CF7-B7E4-5152D9B2FFE4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*\", \"matchCriteriaId\": \"21074553-EDF2-468D-8E79-C39851B5BC79\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x86:*\", \"matchCriteriaId\": \"4E62F9CB-D1B6-4B4D-BCCD-7F4D36A73B4D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:arm64:*\", \"matchCriteriaId\": \"49A4BBDA-0389-4171-AA49-6837F7DF4454\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x64:*\", \"matchCriteriaId\": \"F8C238FA-B20F-40A5-B861-A8295858F4BE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x86:*\", \"matchCriteriaId\": \"56513BCA-A9F5-4112-BDE6-77E9B8D2677E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:arm64:*\", \"matchCriteriaId\": \"665EA912-D724-41EB-86A9-24EB4FE87B54\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x64:*\", \"matchCriteriaId\": \"77E07B96-EAAA-4DD6-9172-0DE98A36726F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x86:*\", \"matchCriteriaId\": \"B846A736-E77C-4665-B28B-4E511880D575\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*\", \"matchCriteriaId\": \"B9F64296-66BF-4F1D-A11C-0C44C347E2AC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*\", \"matchCriteriaId\": \"5D7F7DDB-440E-42CD-82F4-B2C13F3CC462\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server:20h2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1EAF6DBA-6E3A-4854-BFBF-B5DC36CE5929\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server:2022:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BE257836-4F4D-4352-8293-B9CAD34F8794\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Windows Defender Credential Guard Security Feature Bypass Vulnerability\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de Omisi\\u00f3n de la Funcionalidad de Seguridad de Windows Defender Credential Guard\"}]",
"id": "CVE-2022-21921",
"lastModified": "2024-11-21T06:45:42.833",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"secure@microsoft.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 4.4, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 0.8, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:N/C:C/I:N/A:N\", \"baseScore\": 4.9, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 3.9, \"impactScore\": 6.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2022-01-11T21:15:13.567",
"references": "[{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21921\", \"source\": \"secure@microsoft.com\"}, {\"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21921\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2022-21921\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2022-01-11T21:15:13.567\",\"lastModified\":\"2024-11-21T06:45:42.833\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Windows Defender Credential Guard Security Feature Bypass Vulnerability\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de Omisi\u00f3n de la Funcionalidad de Seguridad de Windows Defender Credential Guard\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":4.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":0.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:C/I:N/A:N\",\"baseScore\":4.9,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.9,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"610B33F9-0309-4CF7-B7E4-5152D9B2FFE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"21074553-EDF2-468D-8E79-C39851B5BC79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"4E62F9CB-D1B6-4B4D-BCCD-7F4D36A73B4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"49A4BBDA-0389-4171-AA49-6837F7DF4454\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"F8C238FA-B20F-40A5-B861-A8295858F4BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"56513BCA-A9F5-4112-BDE6-77E9B8D2677E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"665EA912-D724-41EB-86A9-24EB4FE87B54\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"77E07B96-EAAA-4DD6-9172-0DE98A36726F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"B846A736-E77C-4665-B28B-4E511880D575\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"B9F64296-66BF-4F1D-A11C-0C44C347E2AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"5D7F7DDB-440E-42CD-82F4-B2C13F3CC462\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server:20h2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1EAF6DBA-6E3A-4854-BFBF-B5DC36CE5929\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server:2022:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE257836-4F4D-4352-8293-B9CAD34F8794\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21921\",\"source\":\"secure@microsoft.com\"},{\"url\":\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21921\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
CERTFR-2022-AVI-027
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Microsoft Windows. Elles permettent à un attaquant de provoquer une élévation de privilèges, une exécution de code à distance, un déni de service, un contournement de la fonctionnalité de sécurité, une atteinte à la confidentialité des données et une usurpation d'identité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | Windows | Windows Server 2022 | ||
| Microsoft | Windows | Windows Server 2012 | ||
| Microsoft | Windows | Windows 10 pour systèmes x64 | ||
| Microsoft | Windows | Windows 10 Version 1809 pour systèmes x64 | ||
| Microsoft | Windows | Windows 10 Version 1909 pour systèmes x64 | ||
| Microsoft | Windows | Windows Server 2019 (Server Core installation) | ||
| Microsoft | Windows | Windows Server 2019 | ||
| Microsoft | Windows | Windows Server 2012 R2 | ||
| Microsoft | Windows | Windows Server 2022 (Server Core installation) | ||
| Microsoft | Windows | Windows 10 Version 1607 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows Server 2008 pour systèmes x64 Service Pack 2 | ||
| Microsoft | Windows | Windows 10 Version 1809 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows 10 Version 20H2 pour systèmes x64 | ||
| Microsoft | Windows | Windows 10 Version 21H1 pour systèmes 32 bits | ||
| Microsoft | Windows | Remote Desktop client pour Windows Desktop | ||
| Microsoft | Windows | Windows 10 Version 21H2 pour systèmes ARM 64 bits | ||
| Microsoft | Windows | Windows Server 2016 (Server Core installation) | ||
| Microsoft | Windows | Windows RT 8.1 | ||
| Microsoft | Windows | Windows 10 Version 21H1 pour systèmes x64 | ||
| Microsoft | Windows | Windows 7 pour systèmes x64 Service Pack 1 | ||
| Microsoft | Windows | Windows 10 Version 20H2 pour systèmes ARM 64 bits | ||
| Microsoft | Windows | Windows 11 pour systèmes ARM 64 bits | ||
| Microsoft | Windows | Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation) | ||
| Microsoft | Windows | Windows 10 Version 21H1 pour systèmes ARM 64 bits | ||
| Microsoft | Windows | Windows 10 Version 1909 pour systèmes ARM 64 bits | ||
| Microsoft | Windows | Windows 10 Version 1909 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows 10 Version 20H2 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation) | ||
| Microsoft | Windows | Windows 10 Version 1607 pour systèmes x64 | ||
| Microsoft | Windows | Windows Server 2012 (Server Core installation) | ||
| Microsoft | Windows | Windows 10 Version 21H2 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows 10 Version 21H2 pour systèmes x64 | ||
| Microsoft | Windows | Windows Server 2008 pour systèmes 32 bits Service Pack 2 | ||
| Microsoft | Windows | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 | ||
| Microsoft | Windows | Windows 11 pour systèmes x64 | ||
| Microsoft | Windows | Windows 8.1 pour systèmes x64 | ||
| Microsoft | Windows | Windows Server 2016 | ||
| Microsoft | Windows | Windows 8.1 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows Server, version 20H2 (Server Core Installation) | ||
| Microsoft | Windows | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) | ||
| Microsoft | Windows | Windows 10 Version 1809 pour systèmes ARM 64 bits | ||
| Microsoft | Windows | Windows Server 2012 R2 (Server Core installation) | ||
| Microsoft | Windows | Windows 10 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows 7 pour systèmes 32 bits Service Pack 1 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Windows Server 2022",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1909 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 20H2 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H1 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Remote Desktop client pour Windows Desktop",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM 64 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows RT 8.1",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H1 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 7 pour syst\u00e8mes x64 Service Pack 1",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 20H2 pour syst\u00e8mes ARM 64 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 pour syst\u00e8mes ARM 64 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H1 pour syst\u00e8mes ARM 64 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1909 pour syst\u00e8mes ARM 64 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1909 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 20H2 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 8.1 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 8.1 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server, version 20H2 (Server Core Installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes ARM 64 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 7 pour syst\u00e8mes 32 bits Service Pack 1",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-21901",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21901"
},
{
"name": "CVE-2022-21876",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21876"
},
{
"name": "CVE-2022-21861",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21861"
},
{
"name": "CVE-2022-21958",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21958"
},
{
"name": "CVE-2022-21835",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21835"
},
{
"name": "CVE-2022-21903",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21903"
},
{
"name": "CVE-2022-21866",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21866"
},
{
"name": "CVE-2022-21850",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21850"
},
{
"name": "CVE-2022-21916",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21916"
},
{
"name": "CVE-2022-21928",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21928"
},
{
"name": "CVE-2022-21868",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21868"
},
{
"name": "CVE-2022-21892",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21892"
},
{
"name": "CVE-2022-21920",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21920"
},
{
"name": "CVE-2022-21851",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21851"
},
{
"name": "CVE-2022-21873",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21873"
},
{
"name": "CVE-2022-21858",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21858"
},
{
"name": "CVE-2022-21887",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21887"
},
{
"name": "CVE-2022-21865",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21865"
},
{
"name": "CVE-2022-21852",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21852"
},
{
"name": "CVE-2022-21914",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21914"
},
{
"name": "CVE-2022-21919",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21919"
},
{
"name": "CVE-2022-21834",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21834"
},
{
"name": "CVE-2022-21869",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21869"
},
{
"name": "CVE-2022-21877",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21877"
},
{
"name": "CVE-2022-21888",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21888"
},
{
"name": "CVE-2022-21913",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21913"
},
{
"name": "CVE-2021-22947",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22947"
},
{
"name": "CVE-2022-21864",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21864"
},
{
"name": "CVE-2022-21908",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21908"
},
{
"name": "CVE-2022-21863",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21863"
},
{
"name": "CVE-2022-21896",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21896"
},
{
"name": "CVE-2022-21961",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21961"
},
{
"name": "CVE-2022-21897",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21897"
},
{
"name": "CVE-2022-21833",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21833"
},
{
"name": "CVE-2022-21921",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21921"
},
{
"name": "CVE-2022-21890",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21890"
},
{
"name": "CVE-2022-21905",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21905"
},
{
"name": "CVE-2022-21843",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21843"
},
{
"name": "CVE-2022-21918",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21918"
},
{
"name": "CVE-2022-21898",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21898"
},
{
"name": "CVE-2021-36976",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36976"
},
{
"name": "CVE-2022-21871",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21871"
},
{
"name": "CVE-2022-21870",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21870"
},
{
"name": "CVE-2022-21874",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21874"
},
{
"name": "CVE-2022-21847",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21847"
},
{
"name": "CVE-2022-21912",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21912"
},
{
"name": "CVE-2022-21885",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21885"
},
{
"name": "CVE-2022-21862",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21862"
},
{
"name": "CVE-2022-21962",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21962"
},
{
"name": "CVE-2022-21859",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21859"
},
{
"name": "CVE-2022-21872",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21872"
},
{
"name": "CVE-2022-21880",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21880"
},
{
"name": "CVE-2022-21882",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21882"
},
{
"name": "CVE-2022-21839",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21839"
},
{
"name": "CVE-2022-21848",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21848"
},
{
"name": "CVE-2022-21838",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21838"
},
{
"name": "CVE-2022-21879",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21879"
},
{
"name": "CVE-2022-21964",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21964"
},
{
"name": "CVE-2022-21883",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21883"
},
{
"name": "CVE-2022-21902",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21902"
},
{
"name": "CVE-2022-21925",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21925"
},
{
"name": "CVE-2022-21895",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21895"
},
{
"name": "CVE-2022-21860",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21860"
},
{
"name": "CVE-2022-21963",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21963"
},
{
"name": "CVE-2022-21878",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21878"
},
{
"name": "CVE-2022-21922",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21922"
},
{
"name": "CVE-2022-21867",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21867"
},
{
"name": "CVE-2022-21893",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21893"
},
{
"name": "CVE-2022-21907",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21907"
},
{
"name": "CVE-2022-21924",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21924"
},
{
"name": "CVE-2022-21884",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21884"
},
{
"name": "CVE-2022-21910",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21910"
},
{
"name": "CVE-2022-21915",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21915"
},
{
"name": "CVE-2022-21906",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21906"
},
{
"name": "CVE-2022-21959",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21959"
},
{
"name": "CVE-2022-21894",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21894"
},
{
"name": "CVE-2022-21857",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21857"
},
{
"name": "CVE-2022-21960",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21960"
},
{
"name": "CVE-2022-21904",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21904"
},
{
"name": "CVE-2022-21899",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21899"
},
{
"name": "CVE-2022-21889",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21889"
},
{
"name": "CVE-2022-21849",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21849"
},
{
"name": "CVE-2022-21881",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21881"
},
{
"name": "CVE-2022-21836",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21836"
},
{
"name": "CVE-2022-21875",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21875"
},
{
"name": "CVE-2022-21900",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21900"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-027",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-01-12T00:00:00.000000"
}
],
"risks": [
{
"description": "Usurpation d\u0027identit\u00e9"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Windows\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une ex\u00e9cution de code \u00e0\ndistance, un d\u00e9ni de service, un contournement de la fonctionnalit\u00e9 de\ns\u00e9curit\u00e9, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une\nusurpation d\u0027identit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 11 janvier 2022",
"url": "https://msrc.microsoft.com/update-guide/"
}
]
}
CERTFR-2022-AVI-027
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Microsoft Windows. Elles permettent à un attaquant de provoquer une élévation de privilèges, une exécution de code à distance, un déni de service, un contournement de la fonctionnalité de sécurité, une atteinte à la confidentialité des données et une usurpation d'identité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | Windows | Windows Server 2022 | ||
| Microsoft | Windows | Windows Server 2012 | ||
| Microsoft | Windows | Windows 10 pour systèmes x64 | ||
| Microsoft | Windows | Windows 10 Version 1809 pour systèmes x64 | ||
| Microsoft | Windows | Windows 10 Version 1909 pour systèmes x64 | ||
| Microsoft | Windows | Windows Server 2019 (Server Core installation) | ||
| Microsoft | Windows | Windows Server 2019 | ||
| Microsoft | Windows | Windows Server 2012 R2 | ||
| Microsoft | Windows | Windows Server 2022 (Server Core installation) | ||
| Microsoft | Windows | Windows 10 Version 1607 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows Server 2008 pour systèmes x64 Service Pack 2 | ||
| Microsoft | Windows | Windows 10 Version 1809 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows 10 Version 20H2 pour systèmes x64 | ||
| Microsoft | Windows | Windows 10 Version 21H1 pour systèmes 32 bits | ||
| Microsoft | Windows | Remote Desktop client pour Windows Desktop | ||
| Microsoft | Windows | Windows 10 Version 21H2 pour systèmes ARM 64 bits | ||
| Microsoft | Windows | Windows Server 2016 (Server Core installation) | ||
| Microsoft | Windows | Windows RT 8.1 | ||
| Microsoft | Windows | Windows 10 Version 21H1 pour systèmes x64 | ||
| Microsoft | Windows | Windows 7 pour systèmes x64 Service Pack 1 | ||
| Microsoft | Windows | Windows 10 Version 20H2 pour systèmes ARM 64 bits | ||
| Microsoft | Windows | Windows 11 pour systèmes ARM 64 bits | ||
| Microsoft | Windows | Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation) | ||
| Microsoft | Windows | Windows 10 Version 21H1 pour systèmes ARM 64 bits | ||
| Microsoft | Windows | Windows 10 Version 1909 pour systèmes ARM 64 bits | ||
| Microsoft | Windows | Windows 10 Version 1909 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows 10 Version 20H2 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation) | ||
| Microsoft | Windows | Windows 10 Version 1607 pour systèmes x64 | ||
| Microsoft | Windows | Windows Server 2012 (Server Core installation) | ||
| Microsoft | Windows | Windows 10 Version 21H2 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows 10 Version 21H2 pour systèmes x64 | ||
| Microsoft | Windows | Windows Server 2008 pour systèmes 32 bits Service Pack 2 | ||
| Microsoft | Windows | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 | ||
| Microsoft | Windows | Windows 11 pour systèmes x64 | ||
| Microsoft | Windows | Windows 8.1 pour systèmes x64 | ||
| Microsoft | Windows | Windows Server 2016 | ||
| Microsoft | Windows | Windows 8.1 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows Server, version 20H2 (Server Core Installation) | ||
| Microsoft | Windows | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) | ||
| Microsoft | Windows | Windows 10 Version 1809 pour systèmes ARM 64 bits | ||
| Microsoft | Windows | Windows Server 2012 R2 (Server Core installation) | ||
| Microsoft | Windows | Windows 10 pour systèmes 32 bits | ||
| Microsoft | Windows | Windows 7 pour systèmes 32 bits Service Pack 1 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Windows Server 2022",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1909 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 20H2 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H1 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Remote Desktop client pour Windows Desktop",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM 64 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows RT 8.1",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H1 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 7 pour syst\u00e8mes x64 Service Pack 1",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 20H2 pour syst\u00e8mes ARM 64 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 pour syst\u00e8mes ARM 64 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H1 pour syst\u00e8mes ARM 64 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1909 pour syst\u00e8mes ARM 64 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1909 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 20H2 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 8.1 pour syst\u00e8mes x64",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 8.1 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server, version 20H2 (Server Core Installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes ARM 64 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation)",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes 32 bits",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 7 pour syst\u00e8mes 32 bits Service Pack 1",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-21901",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21901"
},
{
"name": "CVE-2022-21876",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21876"
},
{
"name": "CVE-2022-21861",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21861"
},
{
"name": "CVE-2022-21958",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21958"
},
{
"name": "CVE-2022-21835",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21835"
},
{
"name": "CVE-2022-21903",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21903"
},
{
"name": "CVE-2022-21866",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21866"
},
{
"name": "CVE-2022-21850",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21850"
},
{
"name": "CVE-2022-21916",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21916"
},
{
"name": "CVE-2022-21928",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21928"
},
{
"name": "CVE-2022-21868",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21868"
},
{
"name": "CVE-2022-21892",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21892"
},
{
"name": "CVE-2022-21920",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21920"
},
{
"name": "CVE-2022-21851",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21851"
},
{
"name": "CVE-2022-21873",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21873"
},
{
"name": "CVE-2022-21858",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21858"
},
{
"name": "CVE-2022-21887",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21887"
},
{
"name": "CVE-2022-21865",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21865"
},
{
"name": "CVE-2022-21852",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21852"
},
{
"name": "CVE-2022-21914",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21914"
},
{
"name": "CVE-2022-21919",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21919"
},
{
"name": "CVE-2022-21834",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21834"
},
{
"name": "CVE-2022-21869",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21869"
},
{
"name": "CVE-2022-21877",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21877"
},
{
"name": "CVE-2022-21888",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21888"
},
{
"name": "CVE-2022-21913",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21913"
},
{
"name": "CVE-2021-22947",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22947"
},
{
"name": "CVE-2022-21864",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21864"
},
{
"name": "CVE-2022-21908",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21908"
},
{
"name": "CVE-2022-21863",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21863"
},
{
"name": "CVE-2022-21896",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21896"
},
{
"name": "CVE-2022-21961",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21961"
},
{
"name": "CVE-2022-21897",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21897"
},
{
"name": "CVE-2022-21833",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21833"
},
{
"name": "CVE-2022-21921",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21921"
},
{
"name": "CVE-2022-21890",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21890"
},
{
"name": "CVE-2022-21905",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21905"
},
{
"name": "CVE-2022-21843",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21843"
},
{
"name": "CVE-2022-21918",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21918"
},
{
"name": "CVE-2022-21898",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21898"
},
{
"name": "CVE-2021-36976",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36976"
},
{
"name": "CVE-2022-21871",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21871"
},
{
"name": "CVE-2022-21870",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21870"
},
{
"name": "CVE-2022-21874",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21874"
},
{
"name": "CVE-2022-21847",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21847"
},
{
"name": "CVE-2022-21912",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21912"
},
{
"name": "CVE-2022-21885",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21885"
},
{
"name": "CVE-2022-21862",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21862"
},
{
"name": "CVE-2022-21962",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21962"
},
{
"name": "CVE-2022-21859",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21859"
},
{
"name": "CVE-2022-21872",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21872"
},
{
"name": "CVE-2022-21880",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21880"
},
{
"name": "CVE-2022-21882",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21882"
},
{
"name": "CVE-2022-21839",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21839"
},
{
"name": "CVE-2022-21848",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21848"
},
{
"name": "CVE-2022-21838",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21838"
},
{
"name": "CVE-2022-21879",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21879"
},
{
"name": "CVE-2022-21964",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21964"
},
{
"name": "CVE-2022-21883",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21883"
},
{
"name": "CVE-2022-21902",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21902"
},
{
"name": "CVE-2022-21925",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21925"
},
{
"name": "CVE-2022-21895",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21895"
},
{
"name": "CVE-2022-21860",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21860"
},
{
"name": "CVE-2022-21963",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21963"
},
{
"name": "CVE-2022-21878",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21878"
},
{
"name": "CVE-2022-21922",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21922"
},
{
"name": "CVE-2022-21867",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21867"
},
{
"name": "CVE-2022-21893",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21893"
},
{
"name": "CVE-2022-21907",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21907"
},
{
"name": "CVE-2022-21924",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21924"
},
{
"name": "CVE-2022-21884",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21884"
},
{
"name": "CVE-2022-21910",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21910"
},
{
"name": "CVE-2022-21915",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21915"
},
{
"name": "CVE-2022-21906",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21906"
},
{
"name": "CVE-2022-21959",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21959"
},
{
"name": "CVE-2022-21894",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21894"
},
{
"name": "CVE-2022-21857",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21857"
},
{
"name": "CVE-2022-21960",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21960"
},
{
"name": "CVE-2022-21904",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21904"
},
{
"name": "CVE-2022-21899",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21899"
},
{
"name": "CVE-2022-21889",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21889"
},
{
"name": "CVE-2022-21849",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21849"
},
{
"name": "CVE-2022-21881",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21881"
},
{
"name": "CVE-2022-21836",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21836"
},
{
"name": "CVE-2022-21875",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21875"
},
{
"name": "CVE-2022-21900",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21900"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-027",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-01-12T00:00:00.000000"
}
],
"risks": [
{
"description": "Usurpation d\u0027identit\u00e9"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Windows\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une ex\u00e9cution de code \u00e0\ndistance, un d\u00e9ni de service, un contournement de la fonctionnalit\u00e9 de\ns\u00e9curit\u00e9, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une\nusurpation d\u0027identit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 11 janvier 2022",
"url": "https://msrc.microsoft.com/update-guide/"
}
]
}
Title
Уязвимость Защитника Microsoft (Windows Defender) операционных систем Windows, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Description
Уязвимость Защитника Microsoft (Windows Defender) операционных систем Windows связана с раскрытием информации. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации
Severity
Vendor
Microsoft Corp
Software Name
Windows 10 20H2, Windows Server 20H2 (Server Core Installation), Windows 10 21H1, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 11, Windows 10 21H2
Software Version
- (Windows 10 20H2), - (Windows Server 20H2 (Server Core Installation)), - (Windows 10 21H1), - (Windows Server 2022), - (Windows Server 2022 (Server Core installation)), - (Windows 11), - (Windows 10 21H2)
Possible Mitigations
Использование рекомендаций:
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-21834
Reference
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-21834
https://vuldb.com/ru/?id.190141
CWE
CWE-200
{
"CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:N/A:N",
"CVSS 3.0": "AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Windows 10 20H2), - (Windows Server 20H2 (Server Core Installation)), - (Windows 10 21H1), - (Windows Server 2022), - (Windows Server 2022 (Server Core installation)), - (Windows 11), - (Windows 10 21H2)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-21834",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "11.01.2022",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "10.02.2022",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "10.02.2022",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-00729",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2022-21921",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Windows 10 20H2, Windows Server 20H2 (Server Core Installation), Windows 10 21H1, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 11, Windows 10 21H2",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Microsoft Corp Windows 10 20H2 - ARM64, Microsoft Corp Windows 10 20H2 - 32-bit, Microsoft Corp Windows 10 20H2 - 64-bit, Microsoft Corp Windows Server 20H2 (Server Core Installation) - , Microsoft Corp Windows 10 21H1 - 32-bit, Microsoft Corp Windows 10 21H1 - 64-bit, Microsoft Corp Windows 10 21H1 - ARM64, Microsoft Corp Windows Server 2022 - , Microsoft Corp Windows Server 2022 (Server Core installation) - , Microsoft Corp Windows 11 - 64-bit, Microsoft Corp Windows 11 - ARM64, Microsoft Corp Windows 10 21H2 - 64-bit, Microsoft Corp Windows 10 21H2 - 32-bit, Microsoft Corp Windows 10 21H2 - ARM64",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0417\u0430\u0449\u0438\u0442\u043d\u0438\u043a\u0430 Microsoft (Windows Defender) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CWE-200)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0417\u0430\u0449\u0438\u0442\u043d\u0438\u043a\u0430 Microsoft (Windows Defender) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-21834\nhttps://vuldb.com/ru/?id.190141",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-200",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,4)"
}
FKIE_CVE-2022-21921
Vulnerability from fkie_nvd - Published: 2022-01-11 21:15 - Updated: 2024-11-21 06:45
Severity
Summary
Windows Defender Credential Guard Security Feature Bypass Vulnerability
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| microsoft | windows_10 | 20h2 | |
| microsoft | windows_10 | 20h2 | |
| microsoft | windows_10 | 20h2 | |
| microsoft | windows_10 | 21h1 | |
| microsoft | windows_10 | 21h1 | |
| microsoft | windows_10 | 21h1 | |
| microsoft | windows_10 | 21h2 | |
| microsoft | windows_10 | 21h2 | |
| microsoft | windows_10 | 21h2 | |
| microsoft | windows_11 | - | |
| microsoft | windows_11 | - | |
| microsoft | windows_server | 20h2 | |
| microsoft | windows_server | 2022 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:arm64:*",
"matchCriteriaId": "610B33F9-0309-4CF7-B7E4-5152D9B2FFE4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*",
"matchCriteriaId": "21074553-EDF2-468D-8E79-C39851B5BC79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x86:*",
"matchCriteriaId": "4E62F9CB-D1B6-4B4D-BCCD-7F4D36A73B4D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:arm64:*",
"matchCriteriaId": "49A4BBDA-0389-4171-AA49-6837F7DF4454",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x64:*",
"matchCriteriaId": "F8C238FA-B20F-40A5-B861-A8295858F4BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x86:*",
"matchCriteriaId": "56513BCA-A9F5-4112-BDE6-77E9B8D2677E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:arm64:*",
"matchCriteriaId": "665EA912-D724-41EB-86A9-24EB4FE87B54",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x64:*",
"matchCriteriaId": "77E07B96-EAAA-4DD6-9172-0DE98A36726F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x86:*",
"matchCriteriaId": "B846A736-E77C-4665-B28B-4E511880D575",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
"matchCriteriaId": "B9F64296-66BF-4F1D-A11C-0C44C347E2AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
"matchCriteriaId": "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server:20h2:*:*:*:*:*:*:*",
"matchCriteriaId": "1EAF6DBA-6E3A-4854-BFBF-B5DC36CE5929",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server:2022:*:*:*:*:*:*:*",
"matchCriteriaId": "BE257836-4F4D-4352-8293-B9CAD34F8794",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Windows Defender Credential Guard Security Feature Bypass Vulnerability"
},
{
"lang": "es",
"value": "Vulnerabilidad de Omisi\u00f3n de la Funcionalidad de Seguridad de Windows Defender Credential Guard"
}
],
"id": "CVE-2022-21921",
"lastModified": "2024-11-21T06:45:42.833",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 0.8,
"impactScore": 3.6,
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
},
"published": "2022-01-11T21:15:13.567",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21921"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21921"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-Q528-27XH-7WMW
Vulnerability from github – Published: 2022-01-12 00:00 – Updated: 2024-11-14 21:31
VLAI
Details
Windows Defender Credential Guard Security Feature Bypass Vulnerability.
Severity
4.4 (Medium)
{
"affected": [],
"aliases": [
"CVE-2022-21921"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-01-11T21:15:00Z",
"severity": "MODERATE"
},
"details": "Windows Defender Credential Guard Security Feature Bypass Vulnerability.",
"id": "GHSA-q528-27xh-7wmw",
"modified": "2024-11-14T21:31:54Z",
"published": "2022-01-12T00:00:30Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21921"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21921"
},
{
"type": "WEB",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21921"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GSD-2022-21921
Vulnerability from gsd - Updated: 2023-12-13 01:19Details
Windows Defender Credential Guard Security Feature Bypass Vulnerability.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2022-21921",
"description": "Windows Defender Credential Guard Security Feature Bypass Vulnerability.",
"id": "GSD-2022-21921"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2022-21921"
],
"details": "Windows Defender Credential Guard Security Feature Bypass Vulnerability.",
"id": "GSD-2022-21921",
"modified": "2023-12-13T01:19:14.183299Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2022-21921",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Windows 10 Version 21H1",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "10.0.0",
"version_value": "10.0.19043.1466"
}
]
}
},
{
"product_name": "Windows Server 2022",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "10.0.0",
"version_value": "10.0.20348.469"
}
]
}
},
{
"product_name": "Windows 10 Version 20H2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "10.0.0",
"version_value": "10.0.19042.1466"
}
]
}
},
{
"product_name": "Windows Server version 20H2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "10.0.0",
"version_value": "10.0.19042.1466"
}
]
}
},
{
"product_name": "Windows 11 version 21H2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "10.0.0",
"version_value": "10.0.22000.434"
}
]
}
},
{
"product_name": "Windows 10 Version 21H2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "10.0.0",
"version_value": "10.0.19043.1466"
}
]
}
}
]
},
"vendor_name": "Microsoft"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Windows Defender Credential Guard Security Feature Bypass Vulnerability"
}
]
},
"impact": {
"cvss": [
{
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Security Feature Bypass"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21921",
"refsource": "MISC",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21921"
}
]
}
},
"nvd.nist.gov": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:arm64:*",
"matchCriteriaId": "610B33F9-0309-4CF7-B7E4-5152D9B2FFE4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*",
"matchCriteriaId": "21074553-EDF2-468D-8E79-C39851B5BC79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x86:*",
"matchCriteriaId": "4E62F9CB-D1B6-4B4D-BCCD-7F4D36A73B4D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:arm64:*",
"matchCriteriaId": "49A4BBDA-0389-4171-AA49-6837F7DF4454",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x64:*",
"matchCriteriaId": "F8C238FA-B20F-40A5-B861-A8295858F4BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x86:*",
"matchCriteriaId": "56513BCA-A9F5-4112-BDE6-77E9B8D2677E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:arm64:*",
"matchCriteriaId": "665EA912-D724-41EB-86A9-24EB4FE87B54",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x64:*",
"matchCriteriaId": "77E07B96-EAAA-4DD6-9172-0DE98A36726F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x86:*",
"matchCriteriaId": "B846A736-E77C-4665-B28B-4E511880D575",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
"matchCriteriaId": "B9F64296-66BF-4F1D-A11C-0C44C347E2AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
"matchCriteriaId": "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server:20h2:*:*:*:*:*:*:*",
"matchCriteriaId": "1EAF6DBA-6E3A-4854-BFBF-B5DC36CE5929",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server:2022:*:*:*:*:*:*:*",
"matchCriteriaId": "BE257836-4F4D-4352-8293-B9CAD34F8794",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Windows Defender Credential Guard Security Feature Bypass Vulnerability"
},
{
"lang": "es",
"value": "Vulnerabilidad de Omisi\u00f3n de la Funcionalidad de Seguridad de Windows Defender Credential Guard"
}
],
"id": "CVE-2022-21921",
"lastModified": "2023-12-21T01:15:26.097",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 0.8,
"impactScore": 3.6,
"source": "secure@microsoft.com",
"type": "Primary"
}
]
},
"published": "2022-01-11T21:15:13.567",
"references": [
{
"source": "secure@microsoft.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21921"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
MSRC_CVE-2022-21921
Vulnerability from csaf_microsoft - Published: 2022-01-11 08:00 - Updated: 2022-01-11 08:00Summary
Windows Defender Credential Guard Security Feature Bypass Vulnerability
Severity
Important
Notes
Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Customer Action: Required. The vulnerability documented by this CVE requires customer action to resolve.
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Windows 10 Version 20H2 for 32-bit Systems 10.0.19042.1466
Windows 10 Version 20H2 for 32-bit Systems
|
10.0.19042.1466 | ||
|
Windows 10 Version 20H2 for ARM64-based Systems 10.0.19042.1466
Windows 10 Version 20H2 for ARM64-based Systems
|
10.0.19042.1466 | ||
|
Windows Server, version 20H2 (Server Core Installation) 10.0.19042.1466
Windows Server, version 20H2 (Server Core Installation)
|
10.0.19042.1466 | ||
|
Windows 10 Version 21H1 for x64-based Systems 10.0.19043.1466
Windows 10 Version 21H1 for x64-based Systems
|
10.0.19043.1466 | ||
|
Windows 10 Version 21H1 for ARM64-based Systems 10.0.19043.1466
Windows 10 Version 21H1 for ARM64-based Systems
|
10.0.19043.1466 | ||
|
Windows 10 Version 21H1 for 32-bit Systems 10.0.19043.1466
Windows 10 Version 21H1 for 32-bit Systems
|
10.0.19043.1466 | ||
|
Windows Server 2022 10.0.20348.469
Windows Server 2022
|
10.0.20348.469 | ||
|
Windows Server 2022 (Server Core installation) 10.0.20348.469
Windows Server 2022 (Server Core installation)
|
10.0.20348.469 | ||
|
Windows 11 version 21H2 for x64-based Systems 10.0.22000.434
Windows 11 version 21H2 for x64-based Systems
|
10.0.22000.434 | ||
|
Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.434
Windows 11 version 21H2 for ARM64-based Systems
|
10.0.22000.434 | ||
|
Windows 10 Version 21H2 for 32-bit Systems 10.0.19043.1466
Windows 10 Version 21H2 for 32-bit Systems
|
10.0.19043.1466 | ||
|
Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.1466
Windows 10 Version 21H2 for ARM64-based Systems
|
10.0.19044.1466 | ||
|
Windows 10 Version 21H2 for x64-based Systems 10.0.19044.1466
Windows 10 Version 21H2 for x64-based Systems
|
10.0.19044.1466 |
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Windows 10 Version 21H2 for x64-based Systems <10.0.19044.1466
Windows 10 Version 21H2 for x64-based Systems
|
<10.0.19044.1466 |
Vendor Fix
fix
|
|
|
Windows 10 Version 21H2 for ARM64-based Systems <10.0.19044.1466
Windows 10 Version 21H2 for ARM64-based Systems
|
<10.0.19044.1466 |
Vendor Fix
fix
|
|
|
Windows 10 Version 21H2 for 32-bit Systems <10.0.19043.1466
Windows 10 Version 21H2 for 32-bit Systems
|
<10.0.19043.1466 |
Vendor Fix
fix
|
|
|
Windows 11 version 21H2 for ARM64-based Systems <10.0.22000.434
Windows 11 version 21H2 for ARM64-based Systems
|
<10.0.22000.434 |
Vendor Fix
fix
|
|
|
Windows 11 version 21H2 for x64-based Systems <10.0.22000.434
Windows 11 version 21H2 for x64-based Systems
|
<10.0.22000.434 |
Vendor Fix
fix
|
|
|
Windows Server 2022 (Server Core installation) <10.0.20348.469
Windows Server 2022 (Server Core installation)
|
<10.0.20348.469 |
Vendor Fix
fix
|
|
|
Windows Server 2022 <10.0.20348.469
Windows Server 2022
|
<10.0.20348.469 |
Vendor Fix
fix
|
|
|
Windows 10 Version 21H1 for 32-bit Systems <10.0.19043.1466
Windows 10 Version 21H1 for 32-bit Systems
|
<10.0.19043.1466 |
Vendor Fix
fix
|
|
|
Windows 10 Version 21H1 for ARM64-based Systems <10.0.19043.1466
Windows 10 Version 21H1 for ARM64-based Systems
|
<10.0.19043.1466 |
Vendor Fix
fix
|
|
|
Windows 10 Version 21H1 for x64-based Systems <10.0.19043.1466
Windows 10 Version 21H1 for x64-based Systems
|
<10.0.19043.1466 |
Vendor Fix
fix
|
|
|
Windows Server, version 20H2 (Server Core Installation) <10.0.19042.1466
Windows Server, version 20H2 (Server Core Installation)
|
<10.0.19042.1466 |
Vendor Fix
fix
|
|
|
Windows 10 Version 20H2 for ARM64-based Systems <10.0.19042.1466
Windows 10 Version 20H2 for ARM64-based Systems
|
<10.0.19042.1466 |
Vendor Fix
fix
|
|
|
Windows 10 Version 20H2 for 32-bit Systems <10.0.19042.1466
Windows 10 Version 20H2 for 32-bit Systems
|
<10.0.19042.1466 |
Vendor Fix
fix
|
Threats
Impact
Security Feature Bypass
Exploit Status
Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
References
7 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
},
{
"category": "general",
"text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
"title": "Customer Action"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2022-21921 Windows Defender Credential Guard Security Feature Bypass Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21921"
},
{
"category": "self",
"summary": "CVE-2022-21921 Windows Defender Credential Guard Security Feature Bypass Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/2022/msrc_cve-2022-21921.json"
},
{
"category": "external",
"summary": "Microsoft Exploitability Index",
"url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "Windows Defender Credential Guard Security Feature Bypass Vulnerability",
"tracking": {
"current_release_date": "2022-01-11T08:00:00.000Z",
"generator": {
"date": "2025-01-02T18:22:13.046Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2022-21921",
"initial_release_date": "2022-01-11T08:00:00.000Z",
"revision_history": [
{
"date": "2022-01-11T08:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19043.1466",
"product": {
"name": "Windows 10 Version 21H1 for x64-based Systems \u003c10.0.19043.1466",
"product_id": "10"
}
},
{
"category": "product_version",
"name": "10.0.19043.1466",
"product": {
"name": "Windows 10 Version 21H1 for x64-based Systems 10.0.19043.1466",
"product_id": "11896"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H1 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19043.1466",
"product": {
"name": "Windows 10 Version 21H1 for ARM64-based Systems \u003c10.0.19043.1466",
"product_id": "9"
}
},
{
"category": "product_version",
"name": "10.0.19043.1466",
"product": {
"name": "Windows 10 Version 21H1 for ARM64-based Systems 10.0.19043.1466",
"product_id": "11897"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H1 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19043.1466",
"product": {
"name": "Windows 10 Version 21H1 for 32-bit Systems \u003c10.0.19043.1466",
"product_id": "8"
}
},
{
"category": "product_version",
"name": "10.0.19043.1466",
"product": {
"name": "Windows 10 Version 21H1 for 32-bit Systems 10.0.19043.1466",
"product_id": "11898"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H1 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.20348.469",
"product": {
"name": "Windows Server 2022 \u003c10.0.20348.469",
"product_id": "7"
}
},
{
"category": "product_version",
"name": "10.0.20348.469",
"product": {
"name": "Windows Server 2022 10.0.20348.469",
"product_id": "11923"
}
}
],
"category": "product_name",
"name": "Windows Server 2022"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.20348.469",
"product": {
"name": "Windows Server 2022 (Server Core installation) \u003c10.0.20348.469",
"product_id": "6"
}
},
{
"category": "product_version",
"name": "10.0.20348.469",
"product": {
"name": "Windows Server 2022 (Server Core installation) 10.0.20348.469",
"product_id": "11924"
}
}
],
"category": "product_name",
"name": "Windows Server 2022 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19042.1466",
"product": {
"name": "Windows 10 Version 20H2 for 32-bit Systems \u003c10.0.19042.1466",
"product_id": "13"
}
},
{
"category": "product_version",
"name": "10.0.19042.1466",
"product": {
"name": "Windows 10 Version 20H2 for 32-bit Systems 10.0.19042.1466",
"product_id": "11801"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 20H2 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19042.1466",
"product": {
"name": "Windows 10 Version 20H2 for ARM64-based Systems \u003c10.0.19042.1466",
"product_id": "12"
}
},
{
"category": "product_version",
"name": "10.0.19042.1466",
"product": {
"name": "Windows 10 Version 20H2 for ARM64-based Systems 10.0.19042.1466",
"product_id": "11802"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 20H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19042.1466",
"product": {
"name": "Windows Server, version 20H2 (Server Core Installation) \u003c10.0.19042.1466",
"product_id": "11"
}
},
{
"category": "product_version",
"name": "10.0.19042.1466",
"product": {
"name": "Windows Server, version 20H2 (Server Core Installation) 10.0.19042.1466",
"product_id": "11803"
}
}
],
"category": "product_name",
"name": "Windows Server, version 20H2 (Server Core Installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22000.434",
"product": {
"name": "Windows 11 version 21H2 for x64-based Systems \u003c10.0.22000.434",
"product_id": "5"
}
},
{
"category": "product_version",
"name": "10.0.22000.434",
"product": {
"name": "Windows 11 version 21H2 for x64-based Systems 10.0.22000.434",
"product_id": "11926"
}
}
],
"category": "product_name",
"name": "Windows 11 version 21H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22000.434",
"product": {
"name": "Windows 11 version 21H2 for ARM64-based Systems \u003c10.0.22000.434",
"product_id": "4"
}
},
{
"category": "product_version",
"name": "10.0.22000.434",
"product": {
"name": "Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.434",
"product_id": "11927"
}
}
],
"category": "product_name",
"name": "Windows 11 version 21H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19043.1466",
"product": {
"name": "Windows 10 Version 21H2 for 32-bit Systems \u003c10.0.19043.1466",
"product_id": "3"
}
},
{
"category": "product_version",
"name": "10.0.19043.1466",
"product": {
"name": "Windows 10 Version 21H2 for 32-bit Systems 10.0.19043.1466",
"product_id": "11929"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H2 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19044.1466",
"product": {
"name": "Windows 10 Version 21H2 for ARM64-based Systems \u003c10.0.19044.1466",
"product_id": "2"
}
},
{
"category": "product_version",
"name": "10.0.19044.1466",
"product": {
"name": "Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.1466",
"product_id": "11930"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19044.1466",
"product": {
"name": "Windows 10 Version 21H2 for x64-based Systems \u003c10.0.19044.1466",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "10.0.19044.1466",
"product": {
"name": "Windows 10 Version 21H2 for x64-based Systems 10.0.19044.1466",
"product_id": "11931"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H2 for x64-based Systems"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-21921",
"notes": [
{
"category": "general",
"text": "Microsoft",
"title": "Assigning CNA"
}
],
"product_status": {
"fixed": [
"11801",
"11802",
"11803",
"11896",
"11897",
"11898",
"11923",
"11924",
"11926",
"11927",
"11929",
"11930",
"11931"
],
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-21921 Windows Defender Credential Guard Security Feature Bypass Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21921"
},
{
"category": "self",
"summary": "CVE-2022-21921 Windows Defender Credential Guard Security Feature Bypass Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21921"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2022-01-11T08:00:00.000Z",
"details": "10.0.19043.1466:Security Update:https://support.microsoft.com/help/5009543",
"product_ids": [
"10",
"9",
"8",
"3"
],
"url": "https://support.microsoft.com/help/5009543"
},
{
"category": "vendor_fix",
"date": "2022-01-11T08:00:00.000Z",
"details": "10.0.20348.469:Security Update:https://support.microsoft.com/help/5009555",
"product_ids": [
"7",
"6"
],
"url": "https://support.microsoft.com/help/5009555"
},
{
"category": "vendor_fix",
"date": "2022-01-11T08:00:00.000Z",
"details": "10.0.19042.1466:Security Update:https://support.microsoft.com/help/5009543",
"product_ids": [
"13",
"12",
"11"
],
"url": "https://support.microsoft.com/help/5009543"
},
{
"category": "vendor_fix",
"date": "2022-01-11T08:00:00.000Z",
"details": "10.0.22000.434:Security Update:https://support.microsoft.com/help/5009566",
"product_ids": [
"5",
"4"
],
"url": "https://support.microsoft.com/help/5009566"
},
{
"category": "vendor_fix",
"date": "2022-01-11T08:00:00.000Z",
"details": "10.0.19044.1466:Security Update:https://support.microsoft.com/help/5009543",
"product_ids": [
"2",
"1"
],
"url": "https://support.microsoft.com/help/5009543"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"environmentalsScore": 0.0,
"exploitCodeMaturity": "UNPROVEN",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 3.9,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13"
]
}
],
"threats": [
{
"category": "impact",
"details": "Security Feature Bypass"
},
{
"category": "exploit_status",
"details": "Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"
}
],
"title": "Windows Defender Credential Guard Security Feature Bypass Vulnerability"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…