CVE-2022-22015: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
First published: Tue May 10 2022(Updated: )
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability.
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Remote Desktop Windows | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =20h2 | |
| Microsoft Windows 10 | =20h2 | |
| Microsoft Windows 10 | =20h2 | |
| Microsoft Windows 10 | =21h1 | |
| Microsoft Windows 10 | =21h1 | |
| Microsoft Windows 10 | =21h1 | |
| Microsoft Windows 10 | =21h2 | |
| Microsoft Windows 10 | =21h2 | |
| Microsoft Windows 10 | =21h2 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 11 | ||
| Microsoft Windows 11 | ||
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 8.1 | ||
| Microsoft Windows 8.1 | ||
| Microsoft Windows Server | =2022 | |
| Microsoft Windows Server 2008 | =r2-sp1 | |
| Microsoft Windows Server 2008 | =r2-sp1 | |
| Microsoft Windows Server 2012 | ||
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2019 | ||
| Microsoft Windows Server 2012 | ||
| Microsoft Windows Server 2012 R2 | ||
| Microsoft Windows 7 | ||
| Microsoft Windows Server 2008 R2 | ||
| Microsoft Windows 10 | =20H2 | |
| Microsoft Windows 11 | =21H2 | |
| Microsoft Windows 8.1 for x64-based systems | ||
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows Server 2019 | ||
| Microsoft Windows 10 | =21H2 | |
| Microsoft Windows RT 8.1 | ||
| Microsoft Windows Server 2019 | ||
| Microsoft Windows 11 | =21H2 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 7 | ||
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =21H2 | |
| Microsoft Windows Server 2008 R2 | ||
| Microsoft Windows 10 | =21H2 | |
| Microsoft Windows Server 2012 | ||
| Microsoft Windows Server 2022 | ||
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Remote Desktop client for Windows Desktop | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 8.1 for 32-bit systems | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =21H1 | |
| Microsoft Windows Server | =20H2 | |
| Microsoft Windows Server 2012 R2 | ||
| Microsoft Windows 10 | =20H2 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows 10 | =21H1 | |
| Microsoft Windows Server 2022 | ||
| Microsoft Windows 10 | =21H1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-22015?
CVE-2022-22015 is a vulnerability in Windows Remote Desktop Protocol (RDP) that allows for information disclosure.
Which software is affected by CVE-2022-22015?
Microsoft Remote Desktop client for Windows Desktop, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows 7, Microsoft Windows 8.1, Microsoft Windows Server, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016, and Microsoft Windows Server 2019 are all affected by CVE-2022-22015.
What is the severity of CVE-2022-22015?
CVE-2022-22015 has a severity level of medium with a CVSS score of 6.5.
How can I fix CVE-2022-22015?
Apply the latest security updates and patches provided by Microsoft to mitigate the vulnerability.
Where can I find more information about CVE-2022-22015?
You can find more information about CVE-2022-22015 on the Microsoft Security Response Center's website at https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22015.
- agent/author
- agent/type
- agent/description
- agent/title
- agent/remedy
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- collector/msrc-cve
- source/Microsoft
- agent/references
- agent/severity
- agent/first-publish-date
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/tags
- agent/source
- vendor/microsoft
- canonical/microsoft remote desktop windows
- canonical/microsoft windows 10
- version/microsoft windows 10/20h2
- version/microsoft windows 10/21h1
- version/microsoft windows 10/21h2
- version/microsoft windows 10/1607
- version/microsoft windows 10/1809
- version/microsoft windows 10/1909
- canonical/microsoft windows 11
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows 8.1
- canonical/microsoft windows server
- version/microsoft windows server/2022
- canonical/microsoft windows server 2008
- version/microsoft windows server 2008/r2-sp1
- canonical/microsoft windows server 2012
- canonical/microsoft windows server 2016
- canonical/microsoft windows server 2019
- canonical/microsoft windows server 2012 r2
- canonical/microsoft windows server 2008 r2
- version/microsoft windows 11/21h2
- canonical/microsoft windows 8.1 for x64-based systems
- canonical/microsoft windows rt 8.1
- canonical/microsoft windows server 2022
- canonical/microsoft remote desktop client for windows desktop
- canonical/microsoft windows 8.1 for 32-bit systems
- version/microsoft windows server/20h2