CVE-2022-30153

Deeper analysis

The vulnerability CVE-2022-30153 is a remote code execution flaw affecting the Windows Lightweight Directory Access Protocol (LDAP) component. It was published in June 2022 and assigned a CVSS 3.1 score of 8.8 reflecting network attack vector, low complexity, no required privileges, and required user interaction alongside high impact on confidentiality, integrity, and availability.

An unauthenticated remote attacker can exploit the issue over a network connection by convincing a user to perform an action such as opening a specially crafted file or link. Successful exploitation grants the ability to execute arbitrary code with the privileges of the targeted user, resulting in complete system compromise.

Microsoft security advisories at the referenced MSRC update guide URLs describe the vulnerability and direct administrators to apply the patches released in the corresponding security updates. The EPSS score remains at 0.1087 with no material rise from its recorded peak.