cbcvebase.
CVE-2022-21899
published 2022-01-11

CVE-2022-21899: Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

Affected

19 ranges
VendorProductVersion rangeFixed in
microsoftwindows_10_version_1507>= 10.0.10240.0 < 10.0.10240.1917710.0.10240.19177
microsoftwindows_7>= 6.1.0 < 6.1.7601.258296.1.7601.25829
microsoftwindows_7_service_pack_1>= 6.1.0 < 6.1.7601.258296.1.7601.25829
microsoftwindows_8.1>= 6.3.0 < 6.3.9600.202466.3.9600.20246
microsoftwindows_server_2008
microsoftwindows_server_2008_r2_service_pack_1>= 6.1.7601.0 < 6.1.7601.258296.1.7601.25829
microsoftwindows_server_2012
microsoftwindows_server_2012>= 6.2.9200.0 < 6.2.9200.235846.2.9200.23584
microsoftwindows_server_2012_r2>= 6.3.9600.0 < 6.3.9600.202466.3.9600.20246
msrcwindows_10_for_32-bit_systems
msrcwindows_10_for_x64-based_systems
msrcwindows_7_for_32-bit_systems_service_pack_1
msrcwindows_7_for_x64-based_systems_service_pack_1
msrcwindows_8.1_for_32-bit_systems
msrcwindows_8.1_for_x64-based_systems
msrcwindows_rt_8.1
msrcwindows_server_2008_r2_for_x64-based_systems_service_pack_1
msrcwindows_server_2012
msrcwindows_server_2012_r2