CVE-2022-41924

Description

Tailscale Windows daemon is vulnerable to RCE via CSRF in tailscale.com

How to fix CVE-2022-41924

To remediate CVE-2022-41924, upgrade the affected package to a fixed version below.

• Go/tailscale.com—upgrade to 1.32.3 or later
• Go/tailscale.com—upgrade to 1.32.3 or later

Is CVE-2022-41924 being exploited?

Likely — EPSS is 53.6%, placing CVE-2022-41924 in the top tier of vulnerabilities by exploitation probability. Prioritise patching.

Affected packages (2)

• from 0, < 1.32.3
• from 0, < 1.32.3

CVSS scores

References (6)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-41924
• PATCHgithub.com/tailscale/tailscale
• WEBemily.id.au/tailscale
• WEBgithub.com/tailscale/tailscale/releases/tag/v1.32.3
• WEB