CVE-2022-21907
HTTP Protocol Stack Remote Code Execution Vulnerability
CRITICAL 9.8EPSS 92.8%
HTTP Protocol Stack Remote Code Execution Vulnerability
- Affected
- Microsoft · Windows 10 Version 1809 · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 21H1 · Windows Server 2022 · Windows 10 Version 20H2
- CVSS v3.1 MICROSOFT
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 92.79% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2022-01-11
- Updated
- 2025-01-02
Proof-of-concept exploits (17)
- 0xmaximus/Home-Demolisher8★ · 2022-12-08
- EzoomE/CVE-2022-21907-RCE0★ · 2023-05-22
- Malwareman007/CVE-2022-2190717★ · 2025-06-18
- ZZ-SOCMAP/CVE-2022-21907360★ · 2022-01-20
- asepsaepdin/CVE-2022-219070★ · 2023-09-03
- blind-intruder/Exploit-CVE0★ · 2022-05-13
- cassie0206/CVE-2022-219070★ · 2023-06-25
- corelight/cve-2022-219075★ · 2024-10-14
- gpiechnik2/nmap-CVE-2022-219072★ · 2022-04-16
- iveresk/cve-2022-219071★ · 2022-06-10
- iveresk/cve-2022-21907-http.sys1★ · 2022-05-24
- kamal-marouane/CVE-2022-219071★ · 2024-01-19
- mauricelambert/CVE-2022-2190726★ · 2022-03-07
- michelep/CVE-2022-21907-Vulnerability-PoC28★ · 2022-01-23
- p0dalirius/CVE-2022-21907-http.sys82★ · 2024-03-16
- polakow/CVE-2022-21907128★ · 2022-04-13
- reph0r/poc-exp10★ · 2022-10-26