Medium severity5.0NVD Advisory· Published Dec 18, 2024· Updated Jun 17, 2026

CVE-2022-40733

Description

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Windows 11 21h2
cpe:2.3:o:microsoft:windows_11_21h2:10.0.22000.593:*:*:*:*:*:*:*
Microsoft/Windows Server 2003
cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.643:*:*:*:*:*:*:*
Microsoft/win32kbase.sys driverllm-create
Range: 10.0.22000.593, 10.0.20348.643
Microsoft/Windows 11llm-fuzzy
Range: 10.0.22000.593
Microsoft/Windows Server 2025llm-fuzzy
Range: 10.0.20348.643
Microsoft/Windowsv5
Range: Build 22000.593

Patches

Vulnerability mechanics

References

talosintelligence.com/vulnerability_reports/TALOS-2022-1515nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.325
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000