CVE-2022-24501 is a Remote Code Execution Vulnerability affecting Microsoft VP9 Video Extensions. With a CVSS score of 7.8 (High), it can be exploited locally with low attack complexity, requiring user interaction, and potentially leading to high impact on confidentiality, integrity, and availability. While not currently on the CISA KEV catalog, and no public exploit code is available, the vulnerability has garnered some community discussion and media attention, indicating its significance.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:vp9_video_extensions:-:*:*:*:*:*:*:* | ||
>= 1.0.0.0, < 1.0.42791.0CPE match | cpe:2.3:a:microsoft:vp9_video_extensions:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.