Read the docs
TI-2022-06324 Aliases CVE-2022-21964GHSA-c63m-82w2-w8f6

Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability

Priority LOW 27CWE-668Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Microsoft. Impact type from Microsoft.

Summary

Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability

Why it matters now

EPSS 0.00992 62nd percentileScored 2026-11-07
Fix Fixed Microsoft: 1 update

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftWindows 10 Version 160710.0.14393.0 to before 10.0.14393.488610.0.14393.4886Patch availableCNA
  • Windows 10 Version 1607 VendorMicrosoft Affected 10.0.14393.0 to before 10.0.14393.4886 Fixed in 10.0.14393.4886 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*1607VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x86:*1607VulnerableMicrosoft
  • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:* Versions 1607 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x86:* Versions 1607 Vulnerable ·Microsoft

Remediation

Microsoft 1 update

  • KB5009546
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 10.0.14393.4886
    • Windows 10 Version 1607 for 32-bit Systems 10.0.14393.4886
    • Windows 10 Version 1607 for x64-based Systems 10.0.14393.4886
    • Windows Server 2016 10.0.14393.4886
    • Windows Server 2016 (Server Core installation) 10.0.14393.4886

Vendor assessments

Microsoft

Microsoft's page for this CVE →

Impact
Information Disclosure
Exploited
No
Publicly disclosed
No
Exploitability
Exploitation Less Likely

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-21964
  2. 2026-10-03 Alias added: GHSA-c63m-82w2-w8f6

References

Advisory 1

  • TI-2015-02132 Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft… KEVCVSS 3.1HIGH 8.8
  • TI-2022-10056 Remote Procedure Call Runtime Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2022-06273 HTTP Protocol Stack Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2019-00906 Remote Desktop Services Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2022-15533 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2015-01587 Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows… KEVCVSS 3.1MEDIUM 6.6
See all 2973 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences