An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_11_21h2 | Microsoft | 10.0.22000.593 (including) | 10.0.22000.593 (including) |
| Windows_server_2022 | Microsoft | 10.0.20348.643 (including) | 10.0.20348.643 (including) |