Severity
High
Analysis Summary
CVE-2022-30167 CVSS:7.8
Microsoft AV1 Video Extension could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVE-2022-30193 CVSS:7.8
Microsoft AV1 Video Extension could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
- Code Execution
Indicators Of Compromise
CVE
- CVE-2022-30167
- CVE-2022-30193
Affected Vendors
Microsoft
Affected Products
Microsoft AV1 Video Extension
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.