CVE-2022-21964 Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability

2022-01-1120:23:33

microsoft

www.cve.org

remote desktop vulnerability

information disclosure

licensing diagnoser

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

AI Score

7.7

Confidence

High

EPSS

Percentile

9.8%

JSON

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.4886:*:*:*:*:*:x86:*",
      "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.4886:*:*:*:*:*:x64:*"
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "10.0.14393.4886",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]