Description
Windows Runtime存在远程代码执行漏洞。此漏洞是缺乏对WapAuthProvider::CreateInstance构造函数的检验导致的。
Windows Runtime Prauthproviders CVE-2022-21971远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/0vercl0k/CVE-2022-21971
https://nvd.nist.gov/vuln/detail/cve-2022-21971
https://www.rapid7.com/db/vulnerabilities/msft-cve-2022-21971/
https://msrc.microsoft.com/update-guide/vulnerability/cve-2022-21971
https://www.cve.org/CVERecord?id=CVE-2022-21971
https://www.sentinelone.com/vulnerability-database/cve-2022-21971/
https://vulners.com/cve/CVE-2022-21971