CVE-2022-34712

Windows Defender Credential Guard Information Disclosure Vulnerability

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34712
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34712

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_10:20h2::::::arm64:
	cpe:2.3:o:microsoft:windows_10:20h2::::::x64:
	cpe:2.3:o:microsoft:windows_10:20h2::::::x86:
	cpe:2.3:o:microsoft:windows_10:21h1::::::arm64:
	cpe:2.3:o:microsoft:windows_10:21h1::::::x64:
	cpe:2.3:o:microsoft:windows_10:21h1::::::x86:
	cpe:2.3:o:microsoft:windows_10:21h2::::::arm64:
	cpe:2.3:o:microsoft:windows_10:21h2::::::x64:
	cpe:2.3:o:microsoft:windows_10:21h2::::::x86:
	cpe:2.3:o:microsoft:windows_11:-::::::arm64:
	cpe:2.3:o:microsoft:windows_11:-::::::x64:
	cpe:2.3:o:microsoft:windows_server_2016:20h2:::::::*
	cpe:2.3:o:microsoft:windows_server_2022:-:::::::*

History

29 May 2025, 21:15

Type	Values Removed	Values Added
CWE		CWE-200

21 Nov 2024, 07:10

Type	Values Removed	Values Added
References	~~() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34712 -~~	() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34712 -

31 May 2023, 19:15

Type	Values Removed	Values Added
References	{'url': 'http://packetstormsecurity.com/files/168326/Windows-Credential-Guard-KerbIumGetNtlmSupplementalCredential-Information-Disclosure.html', 'name': 'http://packetstormsecurity.com/files/168326/Windows-Credential-Guard-KerbIumGetNtlmSupplementalCredential-Information-Disclosure.html', 'tags': ['Third Party Advisory', 'VDB Entry'], 'refsource': 'MISC'} ~~{'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-34712', 'name': 'N/A', 'tags': ['Patch', 'Vendor Advisory'], 'refsource': 'N/A'}~~	(MISC) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34712 -
Summary	~~Windows Defender Credential Guard Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-34704, CVE-2022-34710.~~	Windows Defender Credential Guard Information Disclosure Vulnerability

16 Sep 2022, 20:08

Type	Values Removed	Values Added
References	~~(MISC) http://packetstormsecurity.com/files/168326/Windows-Credential-Guard-KerbIumGetNtlmSupplementalCredential-Information-Disclosure.html -~~	(MISC) http://packetstormsecurity.com/files/168326/Windows-Credential-Guard-KerbIumGetNtlmSupplementalCredential-Information-Disclosure.html - Third Party Advisory, VDB Entry

09 Sep 2022, 18:15

Type	Values Removed	Values Added
References		(MISC) http://packetstormsecurity.com/files/168326/Windows-Credential-Guard-KerbIumGetNtlmSupplementalCredential-Information-Disclosure.html -

12 Aug 2022, 17:33

Type	Values Removed	Values Added
CPE		cpe:2.3:o:microsoft:windows_10:21h2::::::arm64: cpe:2.3:o:microsoft:windows_10:21h2::::::x86: cpe:2.3:o:microsoft:windows_10:20h2::::::x64: cpe:2.3:o:microsoft:windows_10:21h1::::::arm64: cpe:2.3:o:microsoft:windows_10:21h1::::::x86: cpe:2.3:o:microsoft:windows_11:-::::::x64: cpe:2.3:o:microsoft:windows_10:21h1::::::x64: cpe:2.3:o:microsoft:windows_10:21h2::::::x64: cpe:2.3:o:microsoft:windows_11:-::::::arm64: cpe:2.3:o:microsoft:windows_10:20h2::::::x86: cpe:2.3:o:microsoft:windows_server_2016:20h2:::::::* cpe:2.3:o:microsoft:windows_10:20h2::::::arm64: cpe:2.3:o:microsoft:windows_server_2022:-:::::::*
CWE		NVD-CWE-noinfo
References	~~(N/A) https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-34712 -~~	(N/A) https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-34712 - Patch, Vendor Advisory

09 Aug 2022, 20:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2022-08-09 20:15

Updated : 2025-05-29 21:15

NVD link : CVE-2022-34712

Mitre link : CVE-2022-34712

CVE.ORG link : CVE-2022-34712

JSON object : View

Products Affected

microsoft

windows_server_2016
windows_11
windows_10
windows_server_2022

CWE

NVD-CWE-noinfo CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

5.5 /10