CVE-2022-30146

CVE-2022-30146 is a remote code execution vulnerability affecting Windows Lightweight Directory Access Protocol (LDAP) across various Windows versions, including Windows 10, 11, and several server editions. With a CVSS score of 7.5 (HIGH), this vulnerability has a network attack vector and high attack complexity, potentially leading to significant confidentiality, integrity, and availability impacts if successfully exploited. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered some community discussion and media coverage, notably being addressed in Microsoft's June 2022 Patch Tuesday.