CVE-2022-22015

CVE-2022-22015 is a Windows Remote Desktop Protocol (RDP) information disclosure vulnerability affecting numerous Microsoft Windows and Windows Server versions, as well as the RDP client. Rated Medium (CVSS 6.5), it allows a low-privileged attacker to achieve high confidentiality impact with low attack complexity over the network. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog. Despite limited community discussion and media coverage, its EPSS score suggests a higher than average likelihood of exploitation.