CVE-2022-24536

Deeper analysis

CVE-2022-24536 is a remote code execution vulnerability affecting the Windows DNS Server component. It carries a CVSS 3.1 base score of 7.2 with the vector string AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that successful exploitation can fully compromise the confidentiality, integrity, and availability of the affected system.

An attacker who already possesses high-privileged network access to the DNS server can send specially crafted requests that trigger arbitrary code execution. Because the attack requires no user interaction and can be launched over the network, a compromised domain-administrator or equivalent account is sufficient to achieve complete control of the DNS service and potentially the underlying host.

Microsoft Security Response Center advisories for CVE-2022-24536 describe available patches and recommended mitigation steps; administrators are directed to apply the updates published through the standard Windows Update channels referenced at the listed MSRC URLs.

The associated EPSS score has remained flat at 0.0938 with no material increase after disclosure.