CVE-2022-34734
Published: 13 September 2022
Summary
CVE-2022-34734 is a high-severity an unspecified weakness vulnerability in Microsoft Windows 10. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 5.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-34734 affects the Microsoft ODBC Driver component and carries a CVSS 3.1 score of 8.8. The flaw permits remote code execution when the driver processes specially crafted input over a network connection.
An unauthenticated attacker can exploit the issue remotely with low attack complexity and no privileges, provided the victim performs a required user interaction such as opening a malicious file or visiting a crafted link. Successful exploitation grants the attacker full control over confidentiality, integrity, and availability on the affected system.
Microsoft security advisories published at the referenced MSRC update guide URLs describe available patches and mitigation steps for the vulnerability. The associated EPSS score has remained flat at 0.1353 with no material increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-37683
Vulnerability details
Microsoft ODBC Driver Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.