CVE-2022-22017: Remote Desktop Client Remote Code Execution Vulnerability
Published May 10, 2022
·Updated
Remote Desktop Client Remote Code Execution Vulnerability.
Affected Software
10 affected componentsFixes available
Microsoft Remote Desktop client for Windows Desktop
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Remote Desktop Windows
Microsoft Windows 11
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Remote Desktop Client Windows
Remediation
Event History
May 10, 2022
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·08:33 PM
Data Sourced
via MITRE·08:33 PM
DescriptionSeverity
Data Sourced
via NVD·09:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2022-22017?
CVE-2022-22017 is a Remote Desktop Client Remote Code Execution Vulnerability.
2
Which software is affected by CVE-2022-22017?
The Microsoft Remote Desktop client for Windows Desktop, Microsoft Windows 11, and Microsoft Windows Server 2022 are affected by CVE-2022-22017.
3
What is the severity of CVE-2022-22017?
CVE-2022-22017 has a severity rating of critical.
4
How can I fix CVE-2022-22017?
To fix CVE-2022-22017, update the affected software to the latest patched version.
5
Where can I find more information about CVE-2022-22017?
You can find more information about CVE-2022-22017 on the Microsoft Security Guidance Advisory page at https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22017.