CVE-2022-41047
Published: 09 November 2022
Summary
CVE-2022-41047 is a high-severity an unspecified weakness vulnerability in Microsoft Windows 10. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 4.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Microsoft ODBC Driver contains a remote code execution vulnerability tracked as CVE-2022-41047. The flaw received a CVSS 3.1 score of 8.8 with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-reachable attack surface that requires no privileges but does depend on user interaction. The affected component is the Microsoft ODBC Driver used by Windows applications to connect to databases.
An unauthenticated remote attacker can exploit the issue by supplying a malicious ODBC connection string or response that triggers code execution once a user interacts with the affected application. Successful exploitation grants the attacker full confidentiality, integrity, and availability impact on the target system.
Microsoft has published mitigation guidance in its Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41047, which includes available patches and recommended configuration steps for affected ODBC Driver versions.
The associated EPSS score stands at 0.1859 with an identical recorded peak, indicating moderate but stable exploitation probability since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-44292
Vulnerability details
Microsoft ODBC Driver Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.