PT-2022-1667

CVE-2022-21971

·

Published

2022-02-08

·

Updated

2025-10-24

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version windows10 windows 11 win srv 19 win srv 22
Description The issue is related to incorrect code generation management in the Windows Runtime component of the Windows operating system. This allows a remote attacker to execute arbitrary code. There is a proof of concept exploit available.
Recommendations For Microsoft Windows versions prior to the fixed version, apply the necessary patch to resolve the issue. For windows10, update to a version that includes the fix for this issue. For windows 11, apply the relevant security update. For win srv 19 and win srv 22, install the available patch to mitigate the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾