CVE-2022-41091

MediumCVSS 5.4/10Known exploited (CISA KEV)Last modified Aug 10, 2026

Description

Windows Mark of the Web Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Nov 9, 2022
Last modified
Aug 10, 2026
Added to CISA KEV
Nov 8, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-410927.8Windows Win32k Elevation of Privilege VulnerabilityCVE-2022-410937.8Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityCVE-2022-410947.8Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2022-410957.8Windows Digital Media Receiver Elevation of Privilege VulnerabilityCVE-2022-410967.8Microsoft DWM Core Library Elevation of Privilege VulnerabilityCVE-2022-410976.5Network Policy Server (NPS) RADIUS Protocol Information Disclosure VulnerabilityCVE-2022-410985.5Windows GDI+ Information Disclosure VulnerabilityCVE-2022-410994.6BitLocker Security Feature Bypass VulnerabilityCVE-2022-41104.8The Eventify™ WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such asCVE-2022-411007.8Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityCVE-2022-411017.8Windows Overlay Filter Elevation of Privilege VulnerabilityCVE-2022-411027.8Windows Overlay Filter Elevation of Privilege Vulnerability