CVE-2022-40732
Medium
Description
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Microsoft Windows
PublishedDec 18, 2024
First seenDec 18, 2024
Weakness typeCWE-476NULL pointer dereference
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft windows_11_21h2 | 10.0.22000.593 | — |
| microsoft windows_server_2022 | 10.0.20348.643 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.