CVE-2022-35838
vulnerability analysis and mitigation

Overview

HTTP V3 Denial of Service Vulnerability was identified and assigned CVE-2022-35838. This vulnerability affects Microsoft Windows 11 (ARM64 and x64 versions) and Windows Server 2022 systems, including Azure editions. The vulnerability was initially disclosed on July 13, 2022, and has undergone several modifications in its assessment and documentation (CVE Details, NVD).

Technical details

The vulnerability has been assessed with a CVSS v3.1 Base Score of 7.5 (HIGH) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. This scoring indicates that the vulnerability is network-accessible, requires low attack complexity, needs no privileges or user interaction, and can result in high availability impact while maintaining unchanged scope (NVD).

Impact

The vulnerability primarily affects system availability through denial of service attacks. Given the CVSS scoring, while there are no direct impacts on confidentiality or integrity, the vulnerability can significantly impact system availability, potentially causing service disruptions in affected Windows systems (NVD).

Mitigation and workarounds

Microsoft has released security updates to address this vulnerability. The fix is available through Microsoft's update channels for affected systems including Windows 11 and Windows Server 2022 (Microsoft Security).

Additional resources


SourceThis report was generated using AI

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management