CVE-2022-23265

HIGH 7.2CVE-2022-23265 · Published 09/03/2022 · updated 17/06/2026

In short

CVE-2022-23265 is a HIGH (CVSS 7.2) vulnerability affecting defender for iot (microsoft).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 86.8% of all vulnerabilities.
Fix: update to 22.1.2 or later.

Package	Affected versions	Patched versions
defender for iot microsoft	`< 22.1.2`	`22.1.2`

Microsoft Defender for IoT Remote Code Execution Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.