7.4
High
CVE-2022-50238 The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended…
Description
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is possible to fully synchronize the driver blocklist using WDAC policies. NOTE: The vendor explains that Windows Update provides a smaller, compatibility-focused driver blocklist for general users, while the full XML list is available for advanced users and organizations to customize at the risk of usability issues.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows 10 | 10 → latest | No fix stated |
References
- github.com github.com
- learn.microsoft.com learn.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows
The 829 CVEs of Windows →
CVE-2025-59033
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy
7.4
High
CVE-2025-9491
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
7.0
High
CVE-2022-40733
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version…
5.0
Medium
CVE-2022-40732
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version…
5.0
Medium