Windows HTTP Protocol Stack RCE Vulnerability (CVE-2022-21907) (msrc.microsoft.com)

4 points by bwblabs 4y ago ↗ HN

2 comments

[ 3.0 ms ] story [ 17.1 ms ] thread

Update NOW, patch is out. CVSS:3.1 9.8/8.5

Dutch CERT has a advisory about it: https://www.ncsc.nl/actueel/advisory?id=NCSC-2022-0014 (in Dutch) with all relevant CVE codes, but the RCE in http.sys is rated the highest, that is CVE-2022-21907.