CVE-2022-23278

22

FAUCET Score

CVE-2022-23278 is a medium-severity spoofing vulnerability in Microsoft Defender for Endpoint, impacting Apple, Google, Linux, and Microsoft products. With a CVSS score of 5.9, this network-exploitable flaw has high integrity impact but requires high attack complexity. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 10.8047.22439.1056CPE matchmatch criteria	cpe:2.3:a:microsoft:defender_for_endpoint_edr_sensor::::::::
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:a:microsoft:defender_for_endpoint:-:::::::*

CVSS Data

CVSS version used by this source: 3.1

5.9MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

Exploitability Score

2.2

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

1.83%

Probability of exploitation in next 30 days

EPSS Percentile

76.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0183 is in the 57th percentile among its peer group of 19,958 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (55)

microsoftpatch availablevia msrc

Product: 12013-11801Fixed in: 10.0.19042.1586

microsoftpatch availablevia msrc

Product: 12013-11803Fixed in: 10.0.19042.1586

microsoftpatch availablevia msrc

Product: 12013-11802Fixed in: 10.0.19042.1586

microsoftpatch availablevia msrc

Product: 12013-11714Fixed in: 10.0.18363.2158

microsoftpatch availablevia msrc

Product: 12013-11713Fixed in: 10.0.18363.2158

microsoftpatch availablevia msrc

Product: 12013-11712Fixed in: 10.0.18363.2158

microsoftpatch availablevia msrc

Product: 12013-11926Fixed in: 10.0.22000.556

microsoftpatch availablevia msrc

Product: 12013-11927Fixed in: 10.0.22000.556

microsoftpatch availablevia msrc

Product: 12013-11929Fixed in: 10.0.19044.1586

microsoftpatch availablevia msrc

Product: 12013-11931Fixed in: 10.0.19044.1586

microsoftpatch availablevia msrc

Product: 12013-11930Fixed in: 10.0.19044.1586

microsoftpatch availablevia msrc

Product: 12013-11923Fixed in: 10.0.20348.587

microsoftpatch availablevia msrc

Product: 12013-11924Fixed in: 10.0.20348.587

microsoftpatch availablevia msrc

Product: 12013-11897Fixed in: 10.0.19043.1586

microsoftpatch availablevia msrc

Product: 12013-11898Fixed in: 10.0.19043.1586

microsoftpatch availablevia msrc

Product: 12013-11896Fixed in: 10.0.19043.1586

microsoftpatch availablevia msrc

Product: 12013-11572Fixed in: 10.0.17763.2686

microsoftpatch availablevia msrc

Product: 12013-11571Fixed in: 10.0.17763.2686

microsoftpatch availablevia msrc

Product: 12013-11569Fixed in: 10.0.17763.2686

microsoftpatch availablevia msrc

Product: 12013-11570Fixed in: 10.0.17763.2686

microsoftpatch availablevia msrc

Product: 12013-11568Fixed in: 10.0.17763.2686

microsoftpatch availablevia msrc

Product: 12021-10816Fixed in: 10.8047.22439

microsoftpatch availablevia msrc

Product: 12021-10855Fixed in: 10.8047.22439

microsoftpatch availablevia msrc

Product: 12021-10483Fixed in: 10.8047.22439

microsoftpatch availablevia msrc

Product: 12021-10543Fixed in: 10.8047.22439

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for LinuxFixed in: 101.60.93

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for MacFixed in: 101.60.91

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for AndroidFixed in: 1.0.3011.0302

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for iOSFixed in: 1.1.18090109

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 20H2 for 32-bit SystemsFixed in: 10.0.19042.1586

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows Server, version 20H2 (Server Core Installation)Fixed in: 10.0.19042.1586

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 20H2 for ARM64-based SystemsFixed in: 10.0.19042.1586

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 1909 for ARM64-based SystemsFixed in: 10.0.18363.2158

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 1909 for x64-based SystemsFixed in: 10.0.18363.2158

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 1909 for 32-bit SystemsFixed in: 10.0.18363.2158

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 11 version 21H2 for x64-based SystemsFixed in: 10.0.22000.556

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 11 version 21H2 for ARM64-based SystemsFixed in: 10.0.22000.556

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for 32-bit SystemsFixed in: 10.0.19044.1586

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for x64-based SystemsFixed in: 10.0.19044.1586

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for ARM64-based SystemsFixed in: 10.0.19044.1586

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows Server 2022Fixed in: 10.0.20348.587

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows Server 2022 (Server Core installation)Fixed in: 10.0.20348.587

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows Server 2022 Datacenter: Azure EditionFixed in: 10.0.20348.580

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H1 for ARM64-based SystemsFixed in: 10.0.19043.1586

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H1 for 32-bit SystemsFixed in: 10.0.19043.1586

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H1 for x64-based SystemsFixed in: 10.0.19043.1586

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows Server 2019 (Server Core installation)Fixed in: 10.0.17763.2686

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows Server 2019Fixed in: 10.0.17763.2686

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 for x64-based SystemsFixed in: 10.0.17763.2686

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 for ARM64-based SystemsFixed in: 10.0.17763.2686

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 for 32-bit SystemsFixed in: 10.0.17763.2686

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint EDR sensor on Windows Server 2016Fixed in: 10.8047.22439

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint EDR sensor on Windows Server 2016 (Server Core installation)Fixed in: 10.8047.22439

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint EDR sensor on Windows Server 2012 R2Fixed in: 10.8047.22439

microsoftpatch availablevia msrc

Product: Microsoft Defender for Endpoint EDR sensor on Windows Server 2012 R2 (Server Core installation)Fixed in: 10.8047.22439

Vendor Advisories (1)

microsoft2022-Mar/CVE-2022-23278Important

Microsoft Defender for Endpoint Spoofing Vulnerability

References

msrc.microsoft.com / update-guide/vulnerability/CVE-2022-23278