{"id":"CVE-2022-23748","aliases":[],"url":"https://o3.security/vulnerability/CVE-2022-23748","summary":"mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious…","details":"mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.","published":"2022-11-17T23:15:14.383","modified":"2026-06-17T04:30:45.160","cvss":{"score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"epss":{"score":0.09092,"percentile":0.94987,"asOf":"2026-09-10"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C"},{"type":"ADVISORY","url":"https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748"},{"type":"WEB","url":"https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C"},{"type":"ADVISORY","url":"https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23748"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T04:30:45.160"}}