CVE-2022-38046

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Web Account Manager Information Disclosure Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.3532
MicrosoftWindows 10 Version 1809>= 10.0.0, < 10.0.17763.3532
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.3532
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.3532
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.2130
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.1129
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.2130
MicrosoftWindows 11 version 21H2>= 10.0.0, < 10.0.22000.1098
MicrosoftWindows 10 Version 21H2>= 10.0.19043.0, < 10.0.19044.2130

References

Timeline

Published
Oct 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-380478.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-380487.8Microsoft Office Remote Code Execution VulnerabilityCVE-2022-380497.8Microsoft Office Graphics Remote Code Execution VulnerabilityCVE-2022-38057.5The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in CVE-2022-380507.8Win32k Elevation of Privilege VulnerabilityCVE-2022-380517.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2022-380538.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-380549.8In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.CVE-2022-380555.4Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Content SpoCVE-2022-380565.3Improper neutralization in the Intel(R) EMA software before version 1.8.1.0 may allow a privileged user to potentially enable escalation of CVE-2022-380579.8Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/CVE-2022-380584.3Authenticated (subscriber+) Plugin Setting change vulnerability in WP Shamsi plugin <= 4.1.1 at WordPress.
CVE-2022-38046: High severity, CVSS 7.5 | Vulnix