CVE-2022-40733
Published: 18 December 2024
Summary
CVE-2022-40733 is a medium-severity NULL Pointer Dereference (CWE-476) vulnerability in Microsoft Windows 11 21H2. Its CVSS base score is 5.0 (Medium).
Operationally, ranked in the top 38.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-44002
Vulnerability details
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a…
more
reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.