CVE-2022-34689

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Windows CryptoAPI Spoofing Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-290

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-34694.8The WP Attachments WordPress plugin before 5.0.5 does not sanitize and escapes some of its settings, which could allow high-privilege users CVE-2022-346907.1Windows Fax Service Elevation of Privilege VulnerabilityCVE-2022-346918.8Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2022-346925.3Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2022-346967.8Windows Hyper-V Remote Code Execution VulnerabilityCVE-2022-346997.8Windows Win32k Elevation of Privilege VulnerabilityCVE-2022-34706.5A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affected is an unknown funCVE-2022-347008.8Microsoft Dynamics CRM (on-premises) Remote Code Execution VulnerabilityCVE-2022-347017.5Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service VulnerabilityCVE-2022-347028.1Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityCVE-2022-347037.8Windows Partition Management Driver Elevation of Privilege VulnerabilityCVE-2022-347044.7Windows Defender Credential Guard Information Disclosure Vulnerability
CVE-2022-34689: High severity, CVSS 7.5 | Vulnix