CVE-2022-30188 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-30188 PUBLISHED CVSS 7.800000190734863 HIGH

HEVC Video Extensions Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22018, CVE-2022-29111, CVE-2022-29119.

EPSS 3.16% · 86.8th percentile

Risk Scores

CVSS v3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS Score

3.16%

86.8th percentile

Affected Products

Vendor	Product	Versions
microsoft	hevc_video_extensions	1.0.0.0, 1.0.0, 0
Microsoft	HEVC Video Extension	1.0.0.0
Microsoft	HEVC Video Extensions	1.0.0

Timeline

Jun 14, 2022 CVE Published
Jun 16, 2022 EPSS Score
Aug 3, 2022 EPSS Score
Nov 6, 2022 EPSS Score
Dec 24, 2022 EPSS Score
Mar 7, 2023 EPSS Score
Mar 29, 2023 EPSS Score
Jul 2, 2023 EPSS Score
Aug 18, 2023 EPSS Score
Nov 21, 2023 EPSS Score
Jan 7, 2024 EPSS Score
Apr 11, 2024 EPSS Score

References

https://msrc.microsoft.com/update-guide/ advisory
HEVC Video Extensions Remote Code Execution Vulnerability vendor-advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30188 url
https://nvd.nist.gov/vuln/detail/CVE-2022-30188 advisory

Open in Interactive Console →