CVE-2022-44707

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Windows Kernel Denial of Service Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.3770
MicrosoftWindows 10 Version 1809>= 10.0.0, < 10.0.17763.3770
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.3770
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.3770
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.2364
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.1366
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.2364
MicrosoftWindows 11 version 21H2>= 10.0.22000.0, < 10.0.22000.1335
MicrosoftWindows 10 Version 21H2>= 10.0.19044.0, < 10.0.19044.2364
MicrosoftWindows 11 version 22H2>= 10.0.22621.0, < 10.0.22621.993
MicrosoftWindows 10 Version 22H2>= 10.0.19045.0, < 10.0.19045.2364
MicrosoftWindows 10 Version 1507>= 10.0.10240.0, < 10.0.10240.19624
MicrosoftWindows 10 Version 1607>= 10.0.14393.0, < 10.0.14393.5582
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.5582
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.5582
MicrosoftWindows 8.1>= 6.3.0, < 6.3.9600.20721
MicrosoftWindows Server 2012>= 6.2.9200.0, < 6.2.9200.24018
MicrosoftWindows Server 2012 (Server Core installation)>= 6.2.9200.0, < 6.2.9200.24018
MicrosoftWindows Server 2012 R2>= 6.3.9600.0, < 6.3.9600.20721
MicrosoftWindows Server 2012 R2 (Server Core installation)>= 6.3.9600.0, < 6.3.9600.20721

References

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-447088.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-44715.4The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before outputting them back in a pageCVE-2022-447107.8DirectX Graphics Kernel Elevation of Privilege VulnerabilityCVE-2022-447137.5Microsoft Outlook for Mac Spoofing VulnerabilityCVE-2022-447158.8Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payloadCVE-2022-447173.1An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 1 of 2). After successful login, an attackCVE-2022-447183.5An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After successful login, an attackCVE-2022-447197.5An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions.CVE-2022-44725.4The Simple Sitemap WordPress plugin before 3.5.8 does not validate and escape some of its shortcode attributes before outputting them back iCVE-2022-447209.8An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot.CVE-2022-447245.4The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitraryCVE-2022-447257.8OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal u
CVE-2022-44707: Medium severity, CVSS 6.5 | Vulnix