j00sean/CVE-2022-44666

PoC

Write-up for another forgotten Windows vulnerability (0day): Microsoft Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape, which was not fully fixed as CVE-2022-44666 in the patches released on December, 2022.

view exploit source poc_in_githubauthor j00seanpublished 2023-02-15catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-44666US	—	41.4% (99th)	Exploit	2022-12-13
Windows Contacts Remote Code Execution Vulnerability

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan