VDB
CVE-2022-35748
CVE-2022-35748
PUBLISHED
CVSS 7.5 HIGH
HTTP.sys Denial of Service Vulnerability
EPSS 47.41% · 97.8th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
EPSS Score
47.41%
97.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | windows_server_2012_R2 | 6.3.9600.0, 6.3.9600.0 |
| Microsoft | Windows Server 2012 R2 | 6.3.9600.0 |
| Microsoft | Windows Server 2012 | 6.2.9200.0 |
| Microsoft | Windows Server 2016 | 10.0.14393.0 |
| microsoft | windows_server_2016 | 10.0.14393.0, 10.0.14393.0 |
| microsoft | windows_server_2019 | 10.0.17763.0, 10.0.17763.0 |
| Microsoft | Windows Server 2019 | 10.0.17763.0 |
| Microsoft | Windows Server 2012 (Server Core installation) | 6.2.9200.0 |
| Microsoft | Windows Server 2019 (Server Core installation) | 10.0.17763.0 |
| Microsoft | Windows Server 2012 R2 (Server Core installation) | 6.3.9600.0 |
| microsoft | windows_server_20h2 | |
| Microsoft | Windows Server 2022 | 10.0.20348.0 |
| microsoft | windows_server_2022 | 10.0.20348.0 |
| microsoft | windows_server_20H2 | 10.0.0 |
| Microsoft | Windows Server version 20H2 | 10.0.0 |
| microsoft | windows_server_2012 | r2, 6.2.9200.0, 6.2.9200.0 |
| Microsoft | Windows Server 2016 (Server Core installation) | 10.0.14393.0 |
Exploit Intelligence
Timeline
- Aug 9, 2022 CVE Published
- Jun 1, 2023 EPSS Score
- Mar 17, 2025 EPSS Score
- Mar 29, 2025 EPSS Score
- Mar 30, 2025 EPSS Score
- Apr 30, 2025 EPSS Score
- May 1, 2025 EPSS Score
- Jun 1, 2025 EPSS Score
- Jun 4, 2025 EPSS Score
- Jul 1, 2025 EPSS Score
- Jul 4, 2025 EPSS Score
- Aug 4, 2025 EPSS Score
References
- https://msrc.microsoft.com/update-guide/ advisory
- HTTP.sys Denial of Service Vulnerability vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-35748 advisory