CVE-2022-30139

Deeper analysis

CVE-2022-30139 is a remote code execution vulnerability in the Windows implementation of the Lightweight Directory Access Protocol (LDAP). The flaw affects LDAP client components on supported Windows releases and carries a CVSS 3.1 base score of 7.5, reflecting network attack vector, high attack complexity, low required privileges, and no user interaction.

An authenticated attacker able to supply a malicious LDAP response over the network can trigger the flaw and obtain arbitrary code execution with the privileges of the calling application. Successful exploitation therefore yields full control over confidentiality, integrity, and availability on the affected system, although the high complexity requirement limits the ease of reliable attacks.

Microsoft security updates and the associated advisories at msrc.microsoft.com detail the affected builds and provide the official patches that close the vulnerability. The EPSS score has remained low, with a recorded peak of 0.0621 and a current value of 0.0503, indicating limited observed exploitation interest since disclosure.