CVE-2022-41039
HighCVSS 8.1Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
Vulnerability in Windows Point-to-Point Tunneling Protocol allows remote code execution. An attacker could exploit it to run arbitrary code on a remote system.
Risk Assessment
Risk of remote system compromise, potentially leading to data theft, malware installation, or disruption of operations.
Recommendation
Install security updates released by Microsoft for PPTP.
Other vulnerabilities in Windows Point-to-Point Tunneling Protocol
See all- CVE-2022-41090Medium
Denial of Service vulnerability in Windows Point-to-Point Tunneling Protocol (PPTP). Can cause failure of network services.
- CVE-2022-41088High
Vulnerability in Windows Point-to-Point Tunneling Protocol allows remote code execution. An attacker could exploit it to run malicious code on a remote system.
- CVE-2022-41044High
Vulnerability in Windows Point-to-Point Tunneling Protocol allows remote code execution. An attacker could exploit it to run arbitrary code on a remote system.
Original NVD description (English source)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

