CVE-2022-50238

Katalog CVE

CVSS 7.4 · High EPSS 0,24%

Kerentanan Missing Synchronization. Skor CVSS 3.1 7.4 (High) menurut mitre.org.

Deskripsi (NVD)

The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is possible to fully synchronize the driver blocklist using WDAC policies. NOTE: The vendor explains that Windows Update provides a smaller, compatibility-focused driver blocklist for general users, while the full XML list is available for advanced users and organizations to customize at the risk of usability issues.

Rincian

Terbit di NVD

8 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

7.4 (High), sumber mitre.org
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-820: Missing Synchronization
CWE-184: Incomplete List of Disallowed Inputs

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 13,6% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/wdormann/applywdac
• https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-bu...