Skip to content
OpenAdvisories
High MSRC-CVE-2022-24528 1 CVE

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Published Apr 12, 2022 · Updated Apr 12, 2022

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

How could an attacker exploit the vulnerability?
To exploit this vulnerability, an attacker would need to trick a user into executing a specially crafted script which executes an RPC call to an RPC host. This could result in remote code execution on the server side with the same permissions as the RPC service.

Security updates
10.0.17763.2803 — https://support.microsoft.com/help/5012647
10.0.18363.2212 — https://support.microsoft.com/help/5012591
10.0.19043.1645 — https://support.microsoft.com/help/5012599
10.0.20348.643 — https://support.microsoft.com/help/5012604
10.0.22000.613 — https://support.microsoft.com/help/5012592
10.0.10240.19265 — https://support.microsoft.com/help/5012653
10.0.14393.5066 — https://support.microsoft.com/help/5012596
6.1.7601.25924 — https://support.microsoft.com/help/5012626
6.1.7601.25924 — https://support.microsoft.com/help/5012649
6.3.9600.20337 — https://support.microsoft.com/help/5012670
6.3.9600.20337 — https://support.microsoft.com/help/5012639
6.0.6003.21446 — https://support.microsoft.com/help/5012658
6.0.6003.21446 — https://support.microsoft.com/help/5012632
6.2.9200.23679 — https://support.microsoft.com/help/5012650
6.2.9200.23679 — https://support.microsoft.com/help/5012666

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References