7.4
Élevée
CVE-2022-50238 The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended…
Description
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is possible to fully synchronize the driver blocklist using WDAC policies. NOTE: The vendor explains that Windows Update provides a smaller, compatibility-focused driver blocklist for general users, while the full XML list is available for advanced users and organizations to customize at the risk of usability issues.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Windows 10 | 10 → dernières | Pas de correctif indiqué |
Références
- github.com github.com
- learn.microsoft.com learn.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Windows
Les 829 CVE de Windows →
CVE-2025-59033
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy
7.4
Élevée
CVE-2025-9491
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
7.0
Élevée
CVE-2022-40733
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version…
5.0
Moyenne
CVE-2022-40732
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version…
5.0
Moyenne