CVE-2022-50238: Microsoft Windows, състезание за ресурс

Описание

Оригинално описание

The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is possible to fully synchronize the driver blocklist using WDAC policies. NOTE: The vendor explains that Windows Update provides a smaller, compatibility-focused driver blocklist for general users, while the full XML list is available for advanced users and organizations to customize at the risk of usability issues.

Засегнати продукти

• Microsoft Windows: 10 до Server 2025

Вид слабост

• CWE-820 Missing Synchronization
• CWE-184 Непълен списък със забранени входове

История

Други уязвимости в Microsoft Windows

• 7.4CVE-2025-59033
• 7.0CVE-2025-9491
• 5.0CVE-2022-40733
• 5.0CVE-2022-40732
• 6.7CVE-2024-30164

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-50238
• https://nvd.nist.gov/vuln/detail/CVE-2022-50238
• https://github.com/wdormann/applywdac
• https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules