Lucene search

K
nvd[email protected]NVD:CVE-2022-41091
HistoryNov 09, 2022 - 10:15 p.m.

CVE-2022-41091

2022-11-0922:15:22
CWE-269
web.nvd.nist.gov
2
cve-2022-41091
windows
security feature bypass

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

0.003 Low

EPSS

Percentile

71.7%

Windows Mark of the Web Security Feature Bypass Vulnerability

Affected configurations

NVD
Node
microsoftwindows_10Match-
OR
microsoftwindows_10Match20h2
OR
microsoftwindows_10Match21h1
OR
microsoftwindows_10Match21h2
OR
microsoftwindows_10Match22h2
OR
microsoftwindows_10Match1607
OR
microsoftwindows_10Match1809
OR
microsoftwindows_11Match-arm64
OR
microsoftwindows_11Match-x64
OR
microsoftwindows_11Match22h2arm64
OR
microsoftwindows_11Match22h2x64
OR
microsoftwindows_server_2016Match-
OR
microsoftwindows_server_2019Match-
OR
microsoftwindows_server_2022Match-
OR
microsoftwindows_server_2022Match-datacenter\_azure

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

0.003 Low

EPSS

Percentile

71.7%