First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-21973

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Windows Media Center Update Denial of Service Vulnerability

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Microsoft	Windows 7	>= 6.1.0, < 6.1.7601.25898
Microsoft	Windows 7 Service Pack 1	>= 6.1.0, < 6.1.7601.25898
Microsoft	Windows 8.1	>= 6.3.0, < 6.3.9600.20303
Microsoft	Windows Server 2012	>= 6.2.9200.0, < 6.2.9200.23645
Microsoft	Windows Server 2012 (Server Core installation)	>= 6.2.9200.0, < 6.2.9200.23645
Microsoft	Windows Server 2012 R2	>= 6.3.9600.0, < 6.3.9600.20303
Microsoft	Windows Server 2012 R2 (Server Core installation)	>= 6.3.9600.0, < 6.3.9600.20303

References

Timeline

Published: Mar 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-219747.8Roaming Security Rights Management Services Remote Code Execution Vulnerability CVE-2022-219754.7Windows Hyper-V Denial of Service Vulnerability CVE-2022-219773.3Media Foundation Information Disclosure Vulnerability CVE-2022-219788.2Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2022-219794.8Microsoft Exchange Server Information Disclosure Vulnerability CVE-2022-21984.3The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displ CVE-2022-219808.0Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2022-219817.8Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2022-219837.5Win32 Stream Enumeration Remote Code Execution Vulnerability CVE-2022-219848.8Windows DNS Server Remote Code Execution Vulnerability CVE-2022-219855.5Windows Remote Access Connection Manager Information Disclosure Vulnerability CVE-2022-219867.5.NET Denial of Service Vulnerability

CVE-2022-21973: Medium severity, CVSS 5.5 | Vulnix