Remote CVE-2022-44666 - Microsoft Windows Contacts

[pablo]

Microsoft Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability (CVE-2022-44666) (0day)

GitHub - j00sean/CVE-2022-44666: Write-up for another forgotten Windows vulnerability (0day): Microsoft Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape, which was not fully fixed as CVE-2022-44666 in the patches released on

Write-up for another forgotten Windows vulnerability (0day): Microsoft Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape, which was not fully fixed as CVE-2022-44666 in the ...

github.com

• Vendor: Microsoft.
• App: Microsoft Windows Contacts.
• Version: 10.0.19044.1826.
• Tested systems: Windows 10 & Windows 11.
• Tested system versions: Microsoft Windows [Version 10.0.19044.1826] & Microsoft Windows [Version 10.0.22000.795]

 

[0peratorSuiss3]

You would need local access to machine in order to execute?