MSRC-CVE-2022-34723 — Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could view the data protection API (DPAPI) master key.

Security updates
10.0.22000.978 — https://support.microsoft.com/help/5017328

Vulnerabilities 1

Medium 5.5

CVE-2022-34723

Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability

Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability

Microsoft Windows 11 version 21H2 Windows

Sep 13, 2022

Revision history

2022-09-13 #1
Information published.

References

CVE-2022-34723 Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34723
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss