CVE-2022-22711

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

Windows BitLocker Information Disclosure Vulnerability

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.3165
MicrosoftWindows 10 Version 1809>= 10.0.0, < 10.0.17763.3165
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.3165
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.3165
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.1826
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.825
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.1826
MicrosoftWindows Server version 20H2>= 10.0.0, < 10.0.19042.1826
MicrosoftWindows 11 version 21H2>= 10.0.0, < 10.0.22000.795
MicrosoftWindows 10 Version 21H2>= 10.0.19043.0, < 10.0.19044.1826
MicrosoftWindows 10 Version 1507>= 10.0.10240.0, < 10.0.10240.19360
MicrosoftWindows 10 Version 1607>= 10.0.14393.0, < 10.0.14393.5246
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.5246
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.5246

References

Timeline

Published
Jul 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-227125.6Windows Hyper-V Denial of Service VulnerabilityCVE-2022-227135.6Windows Hyper-V Denial of Service VulnerabilityCVE-2022-227157.8Named Pipe File System Elevation of Privilege VulnerabilityCVE-2022-227165.5Microsoft Excel Information Disclosure VulnerabilityCVE-2022-227177.0Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-227187.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-227197.5A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache CVE-2022-22729.8This vulnerability allows remote attackers to bypass authentication on affected installations of Sante PACS Server 3.0.4. Authentication is CVE-2022-227209.8Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing thCVE-2022-227219.1If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens whichCVE-2022-227227.5A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attacker were to obtain theCVE-2022-227238.8A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and
CVE-2022-22711: Medium severity, CVSS 5.7 | Vulnix