HIGH

CVE-2022-21971

Microsoft Windows 10 1809 2022-02-09 CVSS v3.1

CVSS

7.8

KEV

Description

Windows Runtime Remote Code Execution Vulnerability

Summary dbcve.org

CVE-2022-21971 is a Windows Runtime Remote Code Execution vulnerability with a CVSS 7.8 (HIGH). It allows an attacker to execute arbitrary code on affected Windows systems, likely through a specially crafted application or payload delivered via the Windows Runtime API layer.

Mitigation

Apply Microsoft security updates for CVE-2022-21971 immediately, as patches address the remote code execution vulnerability in the Windows Runtime component.

Patch Commit

Weakness (CWE)

CWE-824

EPSS Score

53.93%

Probability of exploitation in next 30 days

99th percentile

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21971 Patch, Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-21971 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE