← Back

CVE-2022-40732

nvd nist
Published: Dec 18, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.

Affected (2)

Microsoft
2 products
Windows 11 21h2
Windows Server 2022
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Windows 11 21h2
Version 10.0.22000.593
Windows Server 2022
Version 10.0.20348.643

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (1)

Source: talos-cna@cisco.com
ExploitThird Party Advisory

Timeline

No history available yet.