First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-23282

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Paint 3D Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Paint 3D	>= 6.0.0, < 6.2203.1037.0

References

Timeline

Published: Mar 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-232837.0Windows ALPC Elevation of Privilege Vulnerability CVE-2022-232847.2Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-232858.8Remote Desktop Client Remote Code Execution Vulnerability CVE-2022-232867.0Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2022-232877.0Windows ALPC Elevation of Privilege Vulnerability CVE-2022-232887.0Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2022-23299.8A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and CVE-2022-232907.8Windows Inking COM Elevation of Privilege Vulnerability CVE-2022-232917.8Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2022-232923.7Microsoft Power BI Spoofing Vulnerability CVE-2022-232937.8Windows Fast FAT File System Driver Elevation of Privilege Vulnerability CVE-2022-232948.8Windows Event Tracing Remote Code Execution Vulnerability

CVE-2022-23282: High severity, CVSS 7.8 | Vulnix