Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2022-35766

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Description

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows 10 Version 1809

  • 10.0.17763.0 to < 10.0.17763.3287affected

Microsoft Windows 10 Version 1809

  • 10.0.0 to < 10.0.17763.3287affected

Microsoft Windows Server 2019

  • 10.0.17763.0 to < 10.0.17763.3287affected

Microsoft Windows Server 2019 (Server Core installation)

  • 10.0.17763.0 to < 10.0.17763.3287affected

Microsoft Windows 10 Version 21H1

  • 10.0.0 to < 10.0.19043.1889affected

Microsoft Windows Server 2022

  • 10.0.20348.0 to < 10.0.20348.887affected

Microsoft Windows 10 Version 20H2

  • 10.0.0 to < 10.0.19042.1889affected

Microsoft Windows Server version 20H2

  • 10.0.0 to < 10.0.19042.1889affected

Microsoft Windows 11 version 21H2

  • 10.0.0 to < 10.0.22000.856affected

Microsoft Windows 10 Version 21H2

  • 10.0.19043.0 to < 10.0.19044.1889affected

References