First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-22017

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Remote Desktop Client Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Remote Desktop client for Windows Desktop	>= 1.2.0.0, < 1.2.3130
Microsoft	Windows Server 2022	>= 10.0.20348.0, < 10.0.20348.707
Microsoft	Windows 11 version 21H2	>= 10.0.0, < 10.0.22000.675

References

Timeline

Published: May 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-220187.8HEVC Video Extensions Remote Code Execution Vulnerability CVE-2022-220198.8Remote Procedure Call Runtime Remote Code Execution Vulnerability CVE-2022-220218.3Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2022-220227.1Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-220236.6Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability CVE-2022-220247.8Windows Fax Service Remote Code Execution Vulnerability CVE-2022-220257.5Windows Internet Information Services Cachuri Module Denial of Service Vulnerability CVE-2022-220268.8Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability CVE-2022-220277.8Windows Fax Service Remote Code Execution Vulnerability CVE-2022-220285.9Windows Network File System Information Disclosure Vulnerability CVE-2022-220298.1Windows Network File System Remote Code Execution Vulnerability CVE-2022-220317.8Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability

CVE-2022-22017: High severity, CVSS 8.8 | Vulnix