CVE-2022-29800

4.7 mediumEPSS 7.2%

Medium (4.7) in microsoft windows defender for endpoint. EPSS 7.2% chance of exploitation in the next 30 days.

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.

Severity

CVSS 3.1

4.7 medium

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 7.2% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-367
Published: 2022-09-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_defender_for_endpoint

References

https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/
https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/

Check your stack JSON