Lucene search
HistoryOct 11, 2022 - 7:15 p.m.
CVE-2022-38040
microsoft odbc driver
remote code execution
vulnerability
cve-2022-38040
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.018
Percentile
88.2%
Microsoft ODBC Driver Remote Code Execution Vulnerability
Affected configurations
Node
microsoftwindows_10Match-
ORmicrosoftwindows_10Match20h2
ORmicrosoftwindows_10Match21h1
ORmicrosoftwindows_10Match21h2
ORmicrosoftwindows_10Match1607
ORmicrosoftwindows_10Match1809
ORmicrosoftwindows_11Match-arm64
ORmicrosoftwindows_11Match-x64
ORmicrosoftwindows_11Match22h2arm64
ORmicrosoftwindows_11Match22h2x64
ORmicrosoftwindows_7Match-sp1
ORmicrosoftwindows_8.1Match-
ORmicrosoftwindows_rt_8.1Match-
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_server_2008Matchr2sp1x64
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
ORmicrosoftwindows_server_2016Match-
ORmicrosoftwindows_server_2019Match-
ORmicrosoftwindows_server_2022Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_10 | - | cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* |
| microsoft | windows_10 | 20h2 | cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:* |
| microsoft | windows_10 | 21h1 | cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:* |
| microsoft | windows_10 | 21h2 | cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:* |
| microsoft | windows_10 | 1607 | cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* |
| microsoft | windows_10 | 1809 | cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* |
| microsoft | windows_11 | - | cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:* |
| microsoft | windows_11 | - | cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:* |
| microsoft | windows_11 | 22h2 | cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:* |
| microsoft | windows_11 | 22h2 | cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:* |
Related
prion
prion
Remote code execution
2022-10-11 19:15:00
cvelist
cvelist
CVE-2022-38040 Microsoft ODBC Driver Remote Code Execution Vulnerability
2022-10-11 00:00:00
cve
cve
CVE-2022-38040
2022-10-11 19:15:17
mscve
mscve
Microsoft ODBC Driver Remote Code Execution Vulnerability
2022-10-11 07:00:00
cnvd
cnvd
Microsoft ODBC Driver Remote Code Execution Vulnerability
2022-10-13 00:00:00
nessus
nessus
KB5018446: Windows Server 2008 Security Update (October 2022)
2022-10-11 00:00:00
KB5018479: Windows 7 / Windows Server 2008 R2 Security Update (October 2022)
2022-10-11 00:00:00
KB5018478: Windows Server 2012 Security Update (October 2022)
2022-10-11 00:00:00
mskb
mskb
October 11, 2022âKB5018446 (Security-only update)
2022-10-11 07:00:00
October 11, 2022âKB5018450 (Monthly Rollup)
2022-10-11 07:00:00
October 11, 2022âKB5018479 (Security-only update)
2022-10-11 07:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5018454)
2022-10-12 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5018425)
2022-10-12 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5018457)
2022-10-12 00:00:00
kaspersky
kaspersky
KLA20001 Multiple vulnerabilities in Microsoft Products (ESU)
2022-10-11 00:00:00
KLA20000 Multiple vulnerabilities in Microsoft Windows
2022-10-11 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - October 2022
2022-10-11 18:35:28
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.018
Percentile
88.2%
Related for NVD:CVE-2022-38040