CVE-2022-30141

Deeper analysis

CVE-2022-30141 is a remote code execution vulnerability in the Windows Lightweight Directory Access Protocol (LDAP) client implementation. It affects Windows systems that process LDAP responses over the network and carries a CVSS 3.1 base score of 8.1, reflecting high impact on confidentiality, integrity, and availability despite the high attack complexity required.

An unauthenticated remote attacker can exploit the flaw by supplying a malicious LDAP response to a vulnerable Windows client or application that performs LDAP queries. Successful exploitation grants the attacker the ability to execute arbitrary code in the context of the affected process without requiring user interaction or prior credentials.

Microsoft security advisories for CVE-2022-30141, available at the listed MSRC URLs, describe the official patches and configuration guidance that address the issue. The EPSS score has remained flat at 0.0982 since disclosure, indicating no material increase in observed exploitation interest.