Windows Human Interface Device Information Disclosure Vulnerability
CVE-2022-41055

5.5MEDIUM

Key Information:

Vendor: Microsoft
Status: Windows 10 Version 1809; Windows Server 2019; Windows Server 2019 (server Core Installation); Windows 10 Version 21h1
Vendor: CVE Published:; 9 November 2022

🔔 Create Microsoft Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2022-41055?

Windows Human Interface Device Information Disclosure Vulnerability

Affected Version(s)

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.3650

Windows 10 Version 1809 ARM64-based Systems 10.0.0 < 10.0.17763.3650

Windows 10 Version 20H2 32-bit Systems 10.0.0 < 10.0.19042.2251

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

hid_pwn
Created by TroyWarez

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...

vendor-advisory

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

🟡
Public PoC available
Apr 11, 2026
👾
Exploit known to exist
Apr 11, 2026
Vulnerability published
Nov 9, 2022
Vulnerability Reserved
Sep 19, 2022

CVE-2022-41055 Data

JSON