CVE-2022-35752 PUBLISHED CVSS 8.100000381469727 HIGH

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

EPSS 2.47% · 85.1th percentile

Risk Scores

CVSS v3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
2.47%
85.1th percentile

Affected Products

VendorProductVersions
MicrosoftWindows Server 201910.0.17763.0
microsoftwindows_11_21H210.0.0
microsoftwindows_10_160710.0.14393.0, 0, 0
microsoftwindows_10_21H110.0.0
MicrosoftWindows Server 2008 Service Pack 26.0.6003.0
microsoftwindows_server_20H210.0.0
MicrosoftWindows Server 201610.0.14393.0
microsoftwindows_10_21h10, 0, 0
microsoftwindows_10_15070, 0, 10.0.10240.0
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)6.1.7601.0
MicrosoftWindows 11 version 21H210.0.0
microsoftwindows_server_2008_R26.1.7601.0, 6.1.7601.0
microsoftwindows_10_21H210.0.19043.0
microsoftwindows_server_201910.0.17763.0, 10.0.17763.0
microsoftwindows_10_20h20, 0, 0
microsoftwindows_server_2012_R26.3.9600.0, 6.3.9600.0
MicrosoftWindows 10 Version 21H110.0.0
MicrosoftWindows Server 2012 (Server Core installation)6.2.9200.0
microsoftwindows_server_20h2
microsoftwindows_server_2012r2, 6.2.9200.0, 6.2.9200.0

…and 28 more

Timeline

References

Open in Interactive Console →