MSRC-CVE-2022-34704 — Windows Defender Credential Guard Information Disclosure Vulnerability

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could recover plaintext from TLS-protected data.

Security updates
10.0.17763.3287 — https://support.microsoft.com/help/5016623
10.0.19043.1889 — https://support.microsoft.com/help/5016616
10.0.20348.887 — https://support.microsoft.com/help/5016627
10.0.22000.856 — https://support.microsoft.com/help/5016629
10.0.10240.19387 — https://support.microsoft.com/help/5016639
10.0.14393.5291 — https://support.microsoft.com/help/5016622

Vulnerabilities 1

Medium 4.7

CVE-2022-34704

Windows Defender Credential Guard Information Disclosure Vulnerability

Windows Defender Credential Guard Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 9, 2022

Revision history

2022-12-13 #2
Updated one or more CVSS scores for the affected products. This is an informational change only.
2022-08-09 #1
Information published.

References

CVE-2022-34704 Windows Defender Credential Guard Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34704
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss