Vulnerability Description
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is possible to fully synchronize the driver blocklist using WDAC policies. NOTE: The vendor explains that Windows Update provides a smaller, compatibility-focused driver blocklist for general users, while the full XML list is available for advanced users and organizations to customize at the risk of usability issues.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/wdormann/applywdac
- https://learn.microsoft.com/en-us/windows/security/application-security/applicat
FAQ
What is CVE-2022-50238?
CVE-2022-50238 is a vulnerability with a CVSS score of 7.4 (HIGH). The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded fro...
How severe is CVE-2022-50238?
CVE-2022-50238 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-50238?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.