Rewterz

Rewterz Threat Advisory – CVE-2022-37962 – Microsoft PowerPoint Vulnerability

September 18, 2022
Rewterz

Rewterz Threat Advisory – CVE-2022-38019 – Microsoft Windows AV1 Video Extension Vulnerability

September 18, 2022

Rewterz Threat Advisory – CVE-2022-38011 – Microsoft Raw Image Extension Vulnerability

Severity

High

Analysis Summary

CVE-2022-38011

Microsoft Raw Image Extension could allow a remote authenticated attacker to execute arbitrary code on the system. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.

Impact

  • Code Execution

Indicators Of Compromise

CVE

  • CVE-2022-38011

Affected Vendors

  • Microsoft

Affected Products

  • Microsoft Raw Image Extension on Windows 10 for 32-bit systems
  • Microsoft Raw Image Extension on Windows 10 for 64-bit systems
  • Microsoft Raw Image Extension on Windows 10 for 32-bit systems 1607
  • Microsoft Raw Image Extension on Windows 10 for 64-bit systems 1607
  • Microsoft Raw Image Extension on Windows 10 for 32-bit systems 1809
  • Microsoft Raw Image Extension on Windows 10 for ARM64-based systems 1809
  • Microsoft Raw Image Extension on Windows 10 for HoloLens 1809
  • Microsoft Raw Image Extension on Windows 10 for 64-bit systems 1809
  • Microsoft Raw Image Extension on Windows 10 for 32-bit systems 1909
  • Microsoft Raw Image Extension on Windows 10 for ARM64-based systems 1909
  • Microsoft Raw Image Extension on Windows 10 for 64-bit systems 1909
  • Microsoft Raw Image Extension on Windows 10 for 32-bit systems 20H2
  • Microsoft Raw Image Extension on Windows 10 for 64-bit systems 20H2
  • Microsoft Raw Image Extension on Windows 10 for ARM64-based systems 20H2
  • Microsoft Raw Image Extension on Windows 10 for 32-bit systems 21H1
  • Microsoft Raw Image Extension on Windows 10 for ARM64-based systems 21H1
  • Microsoft Raw Image Extension on Windows 10 for 64-bit systems 21H1
  • Microsoft Raw Image Extension on Windows 10 for 32-bit systems 21H2
  • Microsoft Raw Image Extension on Windows 10 for ARM64-based systems 21H2
  • Microsoft Raw Image Extension on Windows 10 for 64-bit systems 21H2
  • Microsoft Raw Image Extension on Windows 11 for ARM64-based systems
  • Microsoft Raw Image Extension on Windows 11 for 64-bit systems

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.

Microsoft Security TechCenter

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.