CVE-2022-41089

Deeper analysis

CVE-2022-41089 is a remote code execution vulnerability in the .NET Framework. It received a CVSS 3.1 base score of 7.8 with the vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local attack vectors that require low complexity and user interaction but can result in full confidentiality, integrity, and availability impact.

An attacker can exploit the flaw by supplying a malicious file or document that a user opens on an affected system. Successful exploitation grants the ability to execute arbitrary code in the context of the current user, potentially leading to complete takeover of the affected machine without needing elevated privileges.

Microsoft has published security guidance and updates addressing the issue through its MSRC portal at the referenced URLs. Administrators should apply the patches listed in those advisories to remediate the vulnerability.

The associated EPSS score rose from a low baseline to a peak of 0.0833 before receding to the current value of 0.0456, indicating a period of increased exploitation interest after disclosure.