CVE:CVE-2022-35822
CNNVD:CNNVD-202208-3096
Microsoft Windows Defender是美国微软（Microsoft）公司的一套Windows系统附带的防病毒软件。
Microsoft Windows Defender Credential Guard存在安全漏洞，攻击者利用该漏洞可以绕过 Defender Credential Guard 使用的 Kerberos 保护，以下产品和版本受到影响：Windows Server 2016(Server Core installation)、Windows Server 2016、Windows 10 Version 1607 for x64-based Systems、Windows 10 Version 1607 for 32-bit Systems、Windows 10 for x64-based Systems、Windows 10 for 32-bit Systems、Windows 10 Version 21H2 for x64-based Systems等。
solution:Upgrade microsoft windows_10 to a higher version than -,20h2,21h1,21h2,1607,1809,and avoid the version 20h2,21h1,21h2,1607,1809; Upgrade microsoft windows_11 to a higher version than -; Upgrade microsoft windows_server_2016 to a higher version than -,20h2,and avoid the version 20h2; Upgrade microsoft windows_server_2019 to a higher version than -; Upgrade microsoft windows_server_2022 to a higher version than -