PT-2022-4172 · Microsoft · Windows Webbrowser Control+1

Eduardo Braun Prado · Published 2022-08-09 · Updated 2025-06-24 · CVE-2022-30194

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows WebBrowser Control (affected versions not specified)

Description The issue exists due to insufficient input validation in the Windows WebBrowser Control component of the Windows operating system. This allows a remote attacker to execute arbitrary code. The vulnerability can be exploited by remote attackers, potentially affecting the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Weakness Enumeration

CWE-94

CWE-20

Related Identifiers

BDU:2022-05019

CVE-2022-30194

ZDI-22-1073

Affected Products

Windows

Windows Webbrowser Control

References · 10

• https://bdu.fstec.ru/vul/2022-05019 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-1073 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30194 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-30194 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-30194 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-30194 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-30194 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30194 · Vendor Advisory
• https://t.me/cvenotify/34618 · Telegram Post
• https://t.me/cvenotify/126578 · Telegram Post