CVE-2022-37974

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.2130
MicrosoftWindows 11 version 21H2>= 10.0.0, < 10.0.22000.1098
MicrosoftWindows 10 Version 21H2>= 10.0.19043.0, < 10.0.19044.2130
MicrosoftWindows 11 version 22H2>= 10.0.22621.0, < 10.0.22621.674

References

Timeline

Published
Oct 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-379758.8Windows Group Policy Elevation of Privilege VulnerabilityCVE-2022-379768.8Active Directory Certificate Services Elevation of Privilege VulnerabilityCVE-2022-379776.5Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityCVE-2022-379787.5Windows Active Directory Certificate Services Security Feature BypassCVE-2022-379797.8Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2022-37988.8A vulnerability classified as critical has been found in IBAX go-ibax. Affected is an unknown function of the file /api/v2/open/tablesInfo. CVE-2022-379807.8Windows DHCP Client Elevation of Privilege VulnerabilityCVE-2022-379814.3Windows Event Logging Service Denial of Service VulnerabilityCVE-2022-379828.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2022-379837.8Microsoft DWM Core Library Elevation of Privilege VulnerabilityCVE-2022-379847.8Windows WLAN Service Elevation of Privilege VulnerabilityCVE-2022-379855.5Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-37974: Medium severity, CVSS 6.5 | Vulnix