← Back to CVE List
Vulnerability Analysis

CVE-2022-23748

mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.

CISA KEV
CVSS Base Score
7.8
HIGH
Exploitability:1.9
Impact Score:5.9
Temporal Score:-
EPSS:9.09%

Threat Intelligence Signals

CISA KEV
YES
KEV Date Added
2025-02-06
Ransomware Use
Unknown
KEV Due Date
2025-02-27
VulnCheck In-the-Wild
No
Nuclei Template
No
EPSS Score
9.092%
EPSS Percentile
94.6th pct
GitHub Severity
HIGH
SSVC Exploitation
SSVC Automatable
Vulnerability Class

Identity & Timeline

Status-
Assigning Authority-
CVSS Version / Source-
Reserved-
Published-
Patch Date (date_public)-
Exploit DB Date-
First GitHub PoC Date-
Last Updated-
Time to Patch (Days to fix)-
Exploit Release Gap-
PoC Release Gap-
Exploit DB ReferencesNone identified

Affected Products & Versions

Vendor Product Affected Versions
No affected products specified.

References

No reference links found.

LINK COPIED TO CLIPBOARD