CVE-2022-44702

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Windows Terminal Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

VendorProductVersions
MicrosoftWindows Terminal for Windows 10>= 1.0.0, < 1.15.2874.0
MicrosoftWindows Terminal for Windows 11>= 1.0.0, < 1.15.2875

References

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-447047.8Microsoft Windows System Monitor (Sysmon) Elevation of Privilege VulnerabilityCVE-2022-447076.5Windows Kernel Denial of Service VulnerabilityCVE-2022-447088.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-44715.4The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before outputting them back in a pageCVE-2022-447107.8DirectX Graphics Kernel Elevation of Privilege VulnerabilityCVE-2022-447137.5Microsoft Outlook for Mac Spoofing VulnerabilityCVE-2022-447158.8Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payloadCVE-2022-447173.1An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 1 of 2). After successful login, an attackCVE-2022-447183.5An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After successful login, an attackCVE-2022-447197.5An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions.CVE-2022-44725.4The Simple Sitemap WordPress plugin before 3.5.8 does not validate and escape some of its shortcode attributes before outputting them back iCVE-2022-447209.8An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot.
CVE-2022-44702: High severity, CVSS 7.8 | Vulnix