Windows HTTP Protocol Stack RCE Vulnerability (CVE-2022-21907)msrc.microsoft.com 4 pointsbwblabs4 years ago2 commentsSaveHideCopy link On HNComments−bwblabsOP4yDutch CERT has a advisory about it: https://www.ncsc.nl/actueel/advisory?id=NCSC-2022-0014 (in Dutch) with all relevant CVE codes, but the RCE in http.sys is rated the highest, that is CVE-2022-21907.−bwblabsOP4yUpdate NOW, patch is out. CVSS:3.1 9.8/8.5
Comments
Dutch CERT has a advisory about it: https://www.ncsc.nl/actueel/advisory?id=NCSC-2022-0014 (in Dutch) with all relevant CVE codes, but the RCE in http.sys is rated the highest, that is CVE-2022-21907.
Update NOW, patch is out. CVSS:3.1 9.8/8.5