First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-21986

HighCVSS 7.5/10Last modified Oct 8, 2026

Description

.NET Denial of Service Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)	>= 15.0.0, < 16.9.17
Microsoft	Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	>= 16.11.0, < 16.11.10
Microsoft	Microsoft Visual Studio 2022 version 17.0	>= 17.0.0, < 17.0.6
Microsoft	Visual Studio 2019 for Mac version 8.10	>= 8.1.0, < 8.10.18
Microsoft	.NET 5.0	>= 5.0.0, < 5.0.14
Microsoft	.NET 6.0	>= 6.0.0, < 6.0.2

References

Timeline

Published: Feb 9, 2022
Last modified: Oct 8, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-219878.0Microsoft SharePoint Server Spoofing Vulnerability CVE-2022-219887.8Microsoft Office Visio Remote Code Execution Vulnerability CVE-2022-219897.8Windows Kernel Elevation of Privilege Vulnerability CVE-2022-21996.1The main MiCODUS MV720 GPS tracker web server has a reflected cross-site scripting vulnerability that could allow an attacker to gain contro CVE-2022-219908.8Remote Desktop Client Remote Code Execution Vulnerability CVE-2022-219918.1Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability CVE-2022-219927.8Windows Mobile Device Management Remote Code Execution Vulnerability CVE-2022-219937.5Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability CVE-2022-219947.8Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2022-219957.9Windows Hyper-V Remote Code Execution Vulnerability CVE-2022-219967.8Win32k Elevation of Privilege Vulnerability CVE-2022-219977.1Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-21986: High severity, CVSS 7.5 | Vulnix