CVE-2022-21973 — Improper Input Validation in Microsoft Windows 7

CWE-20 — Improper Input ValidationCWE-918 — Server-Side Request Forgery5 documents5 sources
Severity
5.5MEDIUMNVD
CISA5.3
EPSS
0.2%
top 59.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Microsoft Windows 7Microsoft Windows 7 Service Pack 1Microsoft Windows 8.1+2 more
Timeline
PublishedMar 9
Latest updateMar 10

Description

Windows Media Center Update Denial of Service Vulnerability

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages6 packages

▶CVEListV5microsoft/windows_7_service_pack_16.1.0 — 6.1.7601.25898
▶CVEListV5microsoft/windows_76.1.0 — 6.1.7601.25898
▶CVEListV5microsoft/windows_8.16.3.0 — 6.3.9600.20303
▶CVEListV5microsoft/windows_server_20126.2.9200.0 — 6.2.9200.23645
▶CVEListV5microsoft/windows_server_2012_r26.3.9600.0 — 6.3.9600.20303

🔴Vulnerability Details

2
GHSA
GHSA-r298-475q-q8x5: Windows Media Center Update Denial of Service Vulnerability↗2022-03-10
▶
CVEList
Windows Media Center Update Denial of Service Vulnerability↗2022-03-09
▶

📋Vendor Advisories

2
Microsoft
Windows Media Center Update Denial of Service Vulnerability↗2022-03-08
▶
CISA
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability↗2022-03-07
▶
CVE-2022-21973 — Improper Input Validation in Microsoft | cvebase