CVE-2022-24547

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Windows Digital Media Receiver Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Windows 10 Version 1809	>= 10.0.17763.0, < 10.0.17763.2803
Microsoft	Windows 10 Version 1809	>= 10.0.0, < 10.0.17763.2803
Microsoft	Windows Server 2019	>= 10.0.17763.0, < 10.0.17763.2803
Microsoft	Windows Server 2019 (Server Core installation)	>= 10.0.17763.0, < 10.0.17763.2803
Microsoft	Windows 10 Version 1909	>= 10.0.0, < 10.0.18363.2212
Microsoft	Windows 10 Version 21H1	>= 10.0.0, < 10.0.19043.1645
Microsoft	Windows Server 2022	>= 10.0.20348.0, < 10.0.20348.643
Microsoft	Windows 10 Version 20H2	>= 10.0.0, < 10.0.19042.1645
Microsoft	Windows Server version 20H2	>= 10.0.0, < 10.0.19042.1645
Microsoft	Windows 11 version 21H2	>= 10.0.0, < 10.0.22000.613
Microsoft	Windows 10 Version 21H2	>= 10.0.19043.0, < 10.0.19044.1645
Microsoft	Windows 10 Version 1507	>= 10.0.10240.0, < 10.0.10240.19265
Microsoft	Windows 10 Version 1607	>= 10.0.14393.0, < 10.0.14393.5066
Microsoft	Windows Server 2016	>= 10.0.14393.0, < 10.0.14393.5066
Microsoft	Windows Server 2016 (Server Core installation)	>= 10.0.14393.0, < 10.0.14393.5066
Microsoft	Windows 8.1	>= 6.3.0, < 6.3.9600.20337
Microsoft	Windows Server 2012	>= 6.2.9200.0, < 6.2.9200.23679
Microsoft	Windows Server 2012 (Server Core installation)	>= 6.2.9200.0, < 6.2.9200.23679
Microsoft	Windows Server 2012 R2	>= 6.3.9600.0, < 6.3.9600.20337
Microsoft	Windows Server 2012 R2 (Server Core installation)	>= 6.3.9600.0, < 6.3.9600.20337

References

Timeline

Published: Apr 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-245485.5Microsoft Defender Denial of Service Vulnerability CVE-2022-245497.8Windows AppX Package Manager Elevation of Privilege Vulnerability CVE-2022-24556.5A business logic issue in the handling of large repositories in all versions of GitLab CE/EE from 10.0 before 15.1.6, all versions starting CVE-2022-245507.8Windows Telephony Server Elevation of Privilege Vulnerability CVE-2022-245518.8A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old password. An attacker CVE-2022-245529.8A flaw was found in the REST API in StarWind Stack. REST command, which manipulates a virtual disk, doesn’t check input parameters. Some of CVE-2022-245539.8An issue was found in Zfaka <= 1.4.5. The verification of the background file upload function check is not strict, resulting in remote comma CVE-2022-24562.7An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versio CVE-2022-245629.8In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access t CVE-2022-245635.4In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_CVE-2022-245646.1Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject CVE-2022-245655.4Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. Th