CVE-2022-22012: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
First published: Tue May 10 2022(Updated: )
Windows LDAP Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29131, CVE-2022-29137, CVE-2022-29139, CVE-2022-29141.
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =20h2 | |
| Microsoft Windows 10 | =20h2 | |
| Microsoft Windows 10 | =20h2 | |
| Microsoft Windows 10 | =21h1 | |
| Microsoft Windows 10 | =21h1 | |
| Microsoft Windows 10 | =21h1 | |
| Microsoft Windows 10 | =21h2 | |
| Microsoft Windows 10 | =21h2 | |
| Microsoft Windows 10 | =21h2 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 11 | ||
| Microsoft Windows 11 | ||
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 8.1 | ||
| Microsoft Windows 8.1 | ||
| Microsoft Windows Server | =2022 | |
| Microsoft Windows Server 2008 | =r2-sp1 | |
| Microsoft Windows Server 2008 | =r2-sp1 | |
| Microsoft Windows Server 2008 | =sp2 | |
| Microsoft Windows Server 2008 | =sp2 | |
| Microsoft Windows Server 2012 | ||
| Microsoft Windows Server 2012 | =r2 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-22012?
CVE-2022-22012 is a Windows LDAP Remote Code Execution Vulnerability.
How severe is CVE-2022-22012?
CVE-2022-22012 has a severity rating of 9.8, which is considered critical.
Which software is affected by CVE-2022-22012?
CVE-2022-22012 affects Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows 7, Microsoft Windows 8.1, Microsoft Windows Server, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016, and Microsoft Windows Server 2019.
How can I fix CVE-2022-22012?
To fix CVE-2022-22012, it is recommended to apply the security patch provided by Microsoft. Please refer to the official Microsoft Security Advisory for more information.
Where can I find more information about CVE-2022-22012?
You can find more information about CVE-2022-22012 on the official Microsoft Security Advisory page.
- agent/author
- agent/event
- agent/description
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/title
- agent/references
- agent/remedy
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft windows 10
- version/microsoft windows 10/20h2
- version/microsoft windows 10/21h1
- version/microsoft windows 10/21h2
- version/microsoft windows 10/1607
- version/microsoft windows 10/1809
- version/microsoft windows 10/1909
- canonical/microsoft windows 11
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows 8.1
- canonical/microsoft windows server
- version/microsoft windows server/2022
- canonical/microsoft windows server 2008
- version/microsoft windows server 2008/r2-sp1
- version/microsoft windows server 2008/sp2
- canonical/microsoft windows server 2012
- version/microsoft windows server 2012/r2
- canonical/microsoft windows server 2016
- canonical/microsoft windows server 2019