CVE-2022-41044 - Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

HIGH

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Published Nov 9, 2022

8.1

HIGH

CVSS 3.1

EPSS 1.07%

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Vendor Microsoft Product Windows 7 Default
unknown
Affected
- ≥ 6.1.0, < 6.1.7601.26221
Vendor Microsoft Product Windows 7 Service Pack 1 Default
unknown
Affected
- ≥ 6.1.0, < 6.1.7601.26221
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
unknown
Affected
- ≥ 6.0.6003.0, < 6.0.6003.21768
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 Default
unknown
Affected
- ≥ 6.1.7601.0, < 6.1.7601.26221
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 (Server Core installation) Default
unknown
Affected
- ≥ 6.1.7601.0, < 6.1.7601.26221
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
unknown
Affected
- ≥ 6.0.6003.0, < 6.0.6003.21768
Vendor Microsoft Product Windows Server 2008 Service Pack 2 (Server Core installation) Default
unknown
Affected
- ≥ 6.0.6003.0, < 6.0.6003.21768

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Windows 7	unknown	Affected ≥ 6.1.0, < 6.1.7601.26221
Microsoft	Windows 7 Service Pack 1	unknown	Affected ≥ 6.1.0, < 6.1.7601.26221
Microsoft	Windows Server 2008 Service Pack 2	unknown	Affected ≥ 6.0.6003.0, < 6.0.6003.21768
Microsoft	Windows Server 2008 R2 Service Pack 1	unknown	Affected ≥ 6.1.7601.0, < 6.1.7601.26221
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	unknown	Affected ≥ 6.1.7601.0, < 6.1.7601.26221
Microsoft	Windows Server 2008 Service Pack 2	unknown	Affected ≥ 6.0.6003.0, < 6.0.6003.21768
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	unknown	Affected ≥ 6.0.6003.0, < 6.0.6003.21768

No remediation recorded yet.

Weaknesses (1)

CWE-362

Race Condition

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44289		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41044		vendor-advisorypatch

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Nov 9, 2022

Updated Aug 10, 2026

Reserved Sep 19, 2022

CISA Vulnrichment

Updated Jun 5, 2024

NVD

Status Modified

Modified Aug 10, 2026

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Nov 9, 2022

Updated Aug 10, 2026

GitHub

No data