CVE-2022-29800: Microsoft Windows Defender For Endpoint
Medium severity, CVSS 4.7. EPSS: 7.2% chance of exploitation in the next 30 days.
A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.
Affected products
- Microsoft Windows Defender For Endpoint: affected versions not specified
Published 2022-09-21. Last modified 2026-06-17.