CVE-2022-24488 - Windows Desktop Bridge Elevation of Privilege Vulnerability · CoreCVE

Back Back to CVE browser

HIGH

Windows Desktop Bridge Elevation of Privilege Vulnerability

Published Apr 15, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.65%

Description

Windows Desktop Bridge Elevation of Privilege Vulnerability

Affected products

Vendor Microsoft Product Windows 10 Version 20H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.19042.1645
Vendor Microsoft Product Windows 10 Version 21H1 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.19043.1645
Vendor Microsoft Product Windows 10 Version 21H2 Default
n/a
- Version
  10.0.19043.0
  Status
  affected
  Constraints
  <10.0.19044.1645
Vendor Microsoft Product Windows 11 version 21H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.22000.613
Vendor Microsoft Product Windows Server 2022 Default
n/a
- Version
  10.0.20348.0
  Status
  affected
  Constraints
  <10.0.20348.643
Vendor Microsoft Product Windows Server version 20H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.19042.1645

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Windows 10 Version 20H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.19042.1645

Windows 10 Version 21H1

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.19043.1645

Windows 10 Version 21H2

n/a

Version	Status	Constraints
10.0.19043.0	affected	<10.0.19044.1645

Windows 11 version 21H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.22000.613

Windows Server 2022

n/a

Version	Status	Constraints
10.0.20348.0	affected	<10.0.20348.643

Windows Server version 20H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.19042.1645

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-29369
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24488
vendor-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-29369		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24488		vendor-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Apr 15, 2022

Updated Dec 16, 2025

Reserved Feb 5, 2022

Link CVE-2022-24488

CISA Vulnrichment

Updated Dec 16, 2025

Status Modified

Modified Jun 17, 2026

Link CVE-2022-24488

Severity n/a

Public date n/a

Links CVE-2022-24488

Assigner microsoft

Published Apr 15, 2022

Updated Dec 16, 2025

Exploited since n/a

Link EUVD-2022-29369

EUVD-2022-29369