{"affected":[{"platforms":["Unknown"],"product":"HEVC Video Extension","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"2.0.51122.0","status":"affected","version":"1.0.0.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"HEVC Video Extensions","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"2.0.51121.0","status":"affected","version":"1.0.0","versionType":"custom"}]}],"cveId":"CVE-2022-22018","cwes":[],"description":"HEVC Video Extensions Remote Code Execution Vulnerability","epss":{"date":"2026-11-02","percentile":0.83237,"score":0.02292},"exploits":[],"kev":null,"metrics":[{"score":7.8,"severity":"high","source":"CNA: microsoft","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"}],"modifiedAt":1793643835620,"publishedAt":1655329869000,"references":[{"source":"CNA: microsoft","tags":["vendor-advisory"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22018"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22018"}],"remediation":[],"revision":"8af4bcd4dd014cd5e1fc1df9e65964ef1c0bd83245dfc89e49120dcabddf76c1","sources":[{"modifiedAt":1793643835620,"name":"CNA: microsoft","retrievedAt":1793646508952,"url":"https://www.cve.org/CVERecord?id=CVE-2022-22018"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793646522234,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-22018"}],"ssvc":{"assessedAt":1704898011759,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"HEVC Video Extensions Remote Code Execution Vulnerability","updatedAt":1793646522234}