CVE-2022-21906: Windows Defender Application Control Security Feature Bypass Vulnerability
Published Jan 11, 2022
·Updated
Windows Defender Application Control Security Feature Bypass Vulnerability.
Affected Software
41 affected componentsFixes available
Microsoft Windows Server=20H2
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows 10=20H2
Microsoft Windows 10=20H2
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=21H1
Microsoft Windows 10=21H1
Microsoft Windows 10=21H1
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=20h2
Microsoft Windows 10=20h2
Microsoft Windows 10=20h2
Microsoft Windows 10=21h1
Microsoft Windows 10=21h1
Microsoft Windows 10=21h1
Microsoft Windows 10=21h2
Microsoft Windows 10=21h2
Microsoft Windows 10=21h2
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 11
Microsoft Windows 11
Microsoft Windows Server=20h2
Microsoft Windows Server=2022
Microsoft Windows Server 2019
Remediation
Event History
Jan 11, 2022
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·08:23 PM
Data Sourced
via MITRE·08:23 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2022-21906?
CVE-2022-21906 is classified as a security feature bypass vulnerability affecting Windows Defender Application Control.
2
How do I fix CVE-2022-21906?
To fix CVE-2022-21906, ensure that you install the latest security updates recommended by Microsoft.
3
Which versions of Windows are affected by CVE-2022-21906?
CVE-2022-21906 affects Windows 10 versions 1809, 1909, 20H2, 21H1, 21H2, and Windows 11, as well as certain Windows Server versions.
4
Can CVE-2022-21906 be exploited remotely?
Yes, CVE-2022-21906 can potentially be exploited remotely, compromising system security.
5
What impact does CVE-2022-21906 have on users?
CVE-2022-21906 could allow attackers to bypass security features, potentially leading to system compromise.