CVE-2022-21974: Roaming Security Rights Management Services Remote Code Execution Vulnerability
Published Feb 8, 2022
·Updated
Roaming Security Rights Management Services Remote Code Execution Vulnerability
Affected Software
49 affected componentsFixes available
Microsoft Windows Server=20H2
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2016
Microsoft Windows 10=20H2
Microsoft Windows 10=20H2
Microsoft Windows 10=20H2
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1607
Microsoft Windows 10=1607
Microsoft Windows 10=21H1
Microsoft Windows 10=21H1
Microsoft Windows 10=21H1
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=20h2
Microsoft Windows 10=20h2
Microsoft Windows 10=20h2
Microsoft Windows 10=21h1
Microsoft Windows 10=21h1
Microsoft Windows 10=21h1
Microsoft Windows 10=21h2
Microsoft Windows 10=21h2
Microsoft Windows 10=21h2
Microsoft Windows 10=1607
Microsoft Windows 10=1607
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 11
Microsoft Windows 11
Microsoft Windows Server=20h2
Microsoft Windows Server=2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Event History
Feb 8, 2022
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Feb 9, 2022
CVE Published
via MITRE·04:36 PM
Data Sourced
via MITRE·04:36 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2022-21974?
CVE-2022-21974 has a severity rating that generally indicates it can allow remote code execution.
2
How do I fix CVE-2022-21974?
To fix CVE-2022-21974, apply the patches provided by Microsoft for affected Windows versions.
3
Which Microsoft products are affected by CVE-2022-21974?
CVE-2022-21974 affects various versions of Microsoft Windows 10, Windows Server, and Windows 11.
4
Can CVE-2022-21974 be exploited remotely?
Yes, CVE-2022-21974 is a remote code execution vulnerability that can be exploited over a network.
5
What are the potential impacts of CVE-2022-21974?
The potential impacts of CVE-2022-21974 include unauthorized access to sensitive data and full system control.