CVE-2022-28331

CRITICAL · CVSS 9.8 EPSS 1.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-31 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-28331

Severity

CRITICAL

CVSS

9.8

EPSS

1.57%

Windows Apache

Original NVD Description

On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.