Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2022-21917
HistoryJan 11, 2022 - 9:15 p.m.

CVE-2022-21917

2022-01-1121:15:00
CWE-787
[email protected]
web.nvd.nist.gov
113
cve-2022-21917
hevc
video extensions
remote code execution
vulnerability
nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.026 Low

EPSS

Percentile

90.1%

JSON

HEVC Video Extensions Remote Code Execution Vulnerability

VendorProductVersionCPE
microsofthevc_video_extension*cpe:2.3:a:microsoft:hevc_video_extension:*:*:*:*:*:*:*:*

Related

prion 1
mscve 1
cnvd 1
nessus 2
hivepro 1
threatpost 1
kaspersky 1
rapid7blog 1
prion
prion
Remote code execution
2022-01-11 21:15:00
mscve
mscve
HEVC Video Extensions Remote Code Execution Vulnerability
2022-01-11 08:00:00
cnvd
cnvd
Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2022-59686)
2022-01-12 00:00:00
nessus
nessus
Microsoft Windows Codecs Library RCE (January 2022)
2022-01-11 00:00:00
Microsoft Windows Codecs Library Multiple Vulnerabilities (March 2022)
2022-03-08 00:00:00
hivepro
hivepro
Microsoft Patch Tuesday fixes critical zero-days along with 97 other flaws
2022-01-12 07:30:07
threatpost
threatpost
Microsoft Faces Wormable, Critical RCE Bug & 6 Zero-Days
2022-01-11 21:54:57
kaspersky
kaspersky
KLA12422 Multiple vulnerabilities in Microsoft Windows
2022-01-11 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - January 2022
2022-01-11 21:41:56

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.026 Low

EPSS

Percentile

90.1%

JSON
Related for CVE-2022-21917
prion1mscve1cnvd1nessus2hivepro1threatpost1kaspersky1rapid7blog1