CVE-2022-35742
Published: 01 June 2023
Summary
CVE-2022-35742 is a high-severity an unspecified weakness vulnerability in Microsoft Outlook. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 8.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-35742 is a denial of service vulnerability in Microsoft Outlook, assigned a CVSS 3.1 base score of 7.5 reflecting network attack vector, low complexity, no required privileges or user interaction, and high impact on availability with no effect on confidentiality or integrity.
An unauthenticated remote attacker can trigger the flaw over the network to disrupt Outlook availability, producing a denial of service condition without needing local access or user assistance.
The primary vendor reference is the Microsoft Security Response Center advisory published at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35742, which addresses mitigation steps and patch availability.
EPSS scores remain low, with a recorded peak of 0.0810 and current value of 0.0695.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-38615
Vulnerability details
Microsoft Outlook Denial of Service Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.