CVE-2022-35837

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Windows Graphics Component Information Disclosure Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.3406
MicrosoftWindows 10 Version 1809>= 10.0.0, < 10.0.17763.3406
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.3406
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.3406
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.2006
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.1006
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.2006
MicrosoftWindows 11 version 21H2>= 10.0.0, < 10.0.22000.978
MicrosoftWindows 10 Version 21H2>= 10.0.19043.0, < 10.0.19044.2006
MicrosoftWindows 10 Version 1507>= 10.0.10240.0, < 10.0.10240.19444
MicrosoftWindows 10 Version 1607>= 10.0.14393.0, < 10.0.14393.5356
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.5356
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.5356
MicrosoftWindows 7>= 6.1.0, < 6.1.7601.26115
MicrosoftWindows 7 Service Pack 1>= 6.1.0, < 6.1.7601.26115
MicrosoftWindows 8.1>= 6.3.0, < 6.3.9600.20571
MicrosoftWindows Server 2008 Service Pack 2>= 6.0.6003.0, < 6.0.6003.21666
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)>= 6.0.6003.0, < 6.0.6003.21666
MicrosoftWindows Server 2008 Service Pack 2>= 6.0.6003.0, < 6.0.6003.21666
MicrosoftWindows Server 2008 R2 Service Pack 1>= 6.1.7601.0, < 6.1.7601.26115
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)>= 6.1.7601.0, < 6.1.7601.26115
MicrosoftWindows Server 2012>= 6.2.9200.0, < 6.2.9200.23865
MicrosoftWindows Server 2012 (Server Core installation)>= 6.2.9200.0, < 6.2.9200.23865
MicrosoftWindows Server 2012 R2>= 6.3.9600.0, < 6.3.9600.20571
MicrosoftWindows Server 2012 R2 (Server Core installation)>= 6.3.9600.0, < 6.3.9600.20571

References

Timeline

Published
Sep 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-358387.5HTTP V3 Denial of Service VulnerabilityCVE-2022-35848.8A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. This issue affects some unknown prCVE-2022-358408.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2022-358418.8Windows Enterprise App Management Service Remote Code Execution VulnerabilityCVE-2022-358427.5An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 throCVE-2022-358439.8An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, 7.0.0 through 7.0.7, CVE-2022-358447.2An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiTester 2.3.0CVE-2022-358458.8Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiTester CVE-2022-358469.8An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 tCVE-2022-358478.8An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management interface 7.2.0, 7CVE-2022-358498.8An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiADC 7.1.0 thCVE-2022-35854.3A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown
CVE-2022-35837: Medium severity, CVSS 6.5 | Vulnix