CVE-2022-35834 PUBLISHED CVSS 8.800000190734863 HIGH

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

EPSS 13.81% · 94.2th percentile

Risk Scores

CVSS v3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
13.81%
94.2th percentile

Affected Products

VendorProductVersions
MicrosoftWindows Server 2012 R26.3.9600.0
microsoftwindows_server_2008_R26.1.7601.0, 6.1.7601.0
MicrosoftWindows 10 Version 160710.0.14393.0
microsoftwindows_server_201910.0.17763.0, 10.0.17763.0
MicrosoftWindows Server 2012 R2 (Server Core installation)6.3.9600.0
microsoftwindows_10_160710.0.14393.0
MicrosoftWindows Server 2008 Service Pack 26.0.6003.0
microsoftwindows_1021h1, 21h1, 20h2
microsoftwindows_8.16.3.0
microsoftwindows_11
MicrosoftWindows 10 Version 21H210.0.19043.0
microsoftwindows_11_21H210.0.0
MicrosoftWindows 10 Version 20H210.0.0
microsoftwindows_server_202210.0.20348.0
MicrosoftWindows Server 202210.0.20348.0
MicrosoftWindows Server 2008 R2 Service Pack 16.1.7601.0
MicrosoftWindows Server 2016 (Server Core installation)10.0.14393.0
microsoftwindows_server_2012_R26.3.9600.0, 6.3.9600.0
microsoftwindows_10_180910.0.17763.0, 10.0.0
microsoftwindows_server_201610.0.14393.0, 10.0.14393.0

…and 23 more

Timeline

References

Open in Interactive Console →