Every CVE Search/ Get API key

CVE-2022-41116

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

5.9 Medium

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.29%Up 0.4 points since Nov 10, 2022
90%50%10%1%

What each source reports

CVE List Score used 5.9

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Record
CVE-2022-41116
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Updated
2026-11-02
EUVDEUVD-2022-44359 5.9

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Record
EUVD-2022-44359
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-c7mp-wpm2-4qqg 5.9

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability. This CVE ID is unique...

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-41090.

Record
GHSA-c7mp-wpm2-4qqg
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-362
Updated
2026-11-02
NVD 5.9

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Record
CVE-2022-41116
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-362
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-41116 is a medium vulnerability (CVSS 5.9) in Microsoft Windows 7, published November 9, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.29%, the 70th percentile. No source names a fixed version.

References

MoveEnter Open