CVE-2022-41089HighMicrosoft CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft security update for CVE-2022-41089

Published
December 13, 2022
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2022-41089 →

📋 Microsoft's advisory

EchelonGraph does not copy Microsoft's advisory page: its FAQ and remediation text are not shown here. Read the advisory on https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41089. This page also shows what EchelonGraph holds for CVE-2022-41089, with the description from its CVE record, which the CVE Numbering Authority that assigned the CVE wrote: for a CVE Microsoft assigned, often in the words of Microsoft's own advisory.

🎯 Affected products96

  • .NET 6.0
  • .NET 7.0
  • .NET Core 3.1
  • Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
  • Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
  • Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
  • Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
  • Microsoft .NET Framework 3.5 AND 4.6/4.6.2 on Windows 10 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.6/4.6.2 on Windows 10 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 20H2 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 20H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H1 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H1 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H1 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 11 version 21H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 11 version 21H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022
  • +66 more not shown

✅ Updates Microsoft lists: 30 KB articles and 11 other updates

48 rows: one per KB article or update, update type and fixed build. Their details are on Microsoft's advisory.

KB articleUpdateFixed build
—Security Update17.2.11
—Security Update16.11.22
—Security Update17.0.17
—Security Update17.4.3
—Security Update6.0.12
—Security Update3.1.32
—Security Update7.0.1
—Security Update7.2.9
—Security Update7.3.2
KB5020878Monthly Rollup04590.02
KB5020902Security Only4590.03
KB5020874Security Update04590.02
KB5020876Monthly Rollup04590.02
KB5020901Security Only04590.03
KB5020902Security Only04590.03
KB5020873Security Update04590.02
KB5020879Monthly Rollup04590.02
KB5020903Security Only04590.03
KB5020872Security Update04590.04
KB5020877Security Update04590.02
KB5020875Security Update04590.02
KB5020875Security Update4590.02
KB5020866Security Update04010.02
—Monthly Rollup04590.02
KB5020873Monthly Rollup04590.02
KB5020883Security Update09115.01
KB5020882Security Update09115.01
KB5020882Security Update9115.01
KB5020860Monthly Rollup30729.8953
KB5020895Security Only30729.8953
KB5020862Monthly Rollup30729.8953
KB5020897Security Only30729.8953
KB5020859Monthly Rollup30729.8953
KB5020894Security Only30729.8953
KB5020861Monthly Rollup30729.8953
KB5020896Security Only30729.8953
KB5020869Monthly Rollup04010.02
KB5020900Security Only4010.03
KB5020867Monthly Rollup04010.02
KB5020900Security Only04010.03

+8 more rows listed in Microsoft's advisory

🧭 EchelonGraph on CVE-2022-41089

EchelonGraph score
8.8 HIGH
CISA KEV
Not listed
Fix status
A fix is available — apply it.

Description from the CVE record (CVE.org), as published by its numbering authority

.NET Framework Remote Code Execution Vulnerability

Published by Microsoft Corporation, the CVE Numbering Authority that assigned CVE-2022-41089, in its CVE record at CVE.org; reused under the CVE Program's Terms of Use (its licence and MITRE's copyright notice are in our Terms of Service).

🔗 References (64)