First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-41044

HighCVSS 8.1/10Last modified Aug 10, 2026

Description

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Windows 7	>= 6.1.0, < 6.1.7601.26221
Microsoft	Windows 7 Service Pack 1	>= 6.1.0, < 6.1.7601.26221
Microsoft	Windows Server 2008 Service Pack 2	>= 6.0.6003.0, < 6.0.6003.21768
Microsoft	Windows Server 2008 R2 Service Pack 1	>= 6.1.7601.0, < 6.1.7601.26221
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	>= 6.1.7601.0, < 6.1.7601.26221
Microsoft	Windows Server 2008 Service Pack 2	>= 6.0.6003.0, < 6.0.6003.21768
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	>= 6.0.6003.0, < 6.0.6003.21768

References

Timeline

Published: Nov 9, 2022
Last modified: Aug 10, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-410457.8Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability CVE-2022-410478.8Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-410488.8Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-410495.4Windows Mark of the Web Security Feature Bypass Vulnerability CVE-2022-41055.4A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attac CVE-2022-410507.8Windows Extensible File Allocation Table Elevation of Privilege Vulnerability CVE-2022-410517.8Azure RTOS GUIX Studio Remote Code Execution Vulnerability CVE-2022-410527.8Windows Graphics Component Remote Code Execution Vulnerability CVE-2022-410537.5Windows Kerberos Denial of Service Vulnerability CVE-2022-410547.8Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability CVE-2022-410555.5Windows Human Interface Device Information Disclosure Vulnerability CVE-2022-410567.5Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability

CVE-2022-41044: High severity, CVSS 8.1 | Vulnix