CVE-2022-41128: Windows Scripting Languages Remote Code Execution Vulnerability
Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution.
Other sources
Windows Scripting Languages Remote Code Execution Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.20671Patch KB5020023 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.23968Patch KB5019958 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.20671Fixed in 6.3.9600.20670Patch KB5019958 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.26221Patch KB5019958 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.5501Patch KB5019964 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.19567Patch KB5019970 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.2251Patch KB5019959 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.819Patch KB5019980 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.2251Patch KB5019959 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.1219Patch KB5019961 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.3650Patch KB5019966 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.1249Fixed in 10.0.20348.1251Patch KB5019080 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19043.2251Patch KB5019959 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19042.2251Patch KB5019959
Event History
Frequently Asked Questions
What is CVE-2022-41128?
CVE-2022-41128 is a vulnerability in Microsoft Windows that allows for remote code execution.
Which versions of Microsoft Windows are affected by CVE-2022-41128?
CVE-2022-41128 affects multiple versions of Microsoft Windows, including Windows 10, Windows 11, Windows Server 2008 R2, Windows Server 2012 R2, Windows Server 2016, Windows 7, Windows 8.1, and Windows Server 2012.
What is the severity of CVE-2022-41128?
The severity of CVE-2022-41128 is critical, with a CVSS score of 8.8.
How can I fix CVE-2022-41128?
To fix CVE-2022-41128, Microsoft has released patches that can be downloaded from the Microsoft Update Catalog or through Windows Update. Please refer to the provided support links for the specific patches for your version of Windows.
Where can I find more information about CVE-2022-41128?
You can find more information about CVE-2022-41128 on the Microsoft Security Response Center website.