Inconsistent Driver Blocklist in Microsoft Windows Driver Management
CVE-2022-50238
Currently unrated
What is CVE-2022-50238?
The Microsoft Windows driver management system contains a vulnerability due to an inconsistency between the on-endpoint driver blocklist and the online recommended driver block rules. Some driver entries that should be blocked appear to be missing from the local blocklist, leading to potential security risks. While users can synchronize the driver blocklist using Windows Defender Application Control (WDAC) policies, the vendor advises that the Windows Update provides a limited blocklist focused on compatibility for the average user. Advanced users and organizations are encouraged to utilize the comprehensive XML list, though this may introduce usability challenges.