CVE-2022-35804

—

CVSS 3.1

8.8 high

EPSS

3%p85

Published

Aug 9, 2022 (Aug 9, 2022)

Modified

Jun 17, 2026

Description

SMB Client and Server Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows 11
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news3 stories

Microsoft fixes exploited zero-day in Windows Support Diagnostic Tool (CVE-2022-34713)

Help Net SecurityDec 12, 12:03 UTC · Dec 12, 2023Exploit / PoC in the wildCVE-2022-34713 CVE-2022-30134 CVE-2017-11882+4 CVEs1

60

Patch Tuesday for August 2022 fixed actively exploited zero

Security AffairsAug 9, 21:25 UTC · Aug 9, 2022Vulnerability in the wildCVE-2022-34713 CVE-2022-30133 CVE-2022-35744+46 CVEs

60

Microsoft Patch Tuesday for August 2022 — Snort rules and prominent vulnerabilities

Cisco TalosAug 9, 20:44 UTC · Aug 9, 2022Vulnerability in the wildCVE-2022-35743 CVE-2022-34713 CVE-2022-21980+13 CVEs

60