CVE-2022-40732

published 2024-12-18

CVE-2022-40732: An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
microsoft	windows	—	—
microsoft	windows_11_21h2	—	—
microsoft	windows_server_2022	—	—

CWE-476