CVE-2022-35752: 
vulnerability analysis and mitigation

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability, identified as CVE-2022-35752, was discovered and reported in 2022. The vulnerability affects multiple versions of Microsoft Windows operating systems, including Windows 10, Windows 11, Windows Server 2008, 2012, 2016, 2019, and 2022 (Microsoft Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 8.1 (HIGH) with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating that it is a network-accessible vulnerability requiring no privileges or user interaction, though with high attack complexity. The vulnerability affects the Windows Secure Socket Tunneling Protocol (SSTP) component (NVD).

If successfully exploited, this vulnerability could allow an attacker to achieve remote code execution with high impacts on confidentiality, integrity, and availability of the affected systems (Microsoft Advisory).

Microsoft has released security updates to address this vulnerability. Users are advised to apply the appropriate patches for their affected Windows systems through Windows Update (Microsoft Advisory).