CVE-2022-32223

Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine:* OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf” exists.Whenever the above conditions are present, `node.exe` will search for `providers.dll` in the current user directory.After that, `node.exe` will try to search for `providers.dll` by the DLL Search Order in Windows.It is possible for an attacker to place the malicious file `providers.dll` under a variety of paths and exploit this vulnerability.

• CWE-427
• CWE-427

• https://hackerone.com/reports/1447455Permissions Required
• https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/Patch, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220915-0001/Third Party Advisory
• https://hackerone.com/reports/1447455Permissions Required
• https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/Patch, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220915-0001/Third Party Advisory

Published

Jul 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-32218An information disclosure vulnerability exists in Rocket.Cha…4.3
• CVE-2022-32219An information disclosure vulnerability exists in Rocket.Cha…4.3
• CVE-2022-3222Uncontrolled Recursion in GitHub repository gpac/gpac prior …5.5
• CVE-2022-32220An information disclosure vulnerability exists in Rocket.Cha…6.5
• CVE-2022-32221When doing HTTP(S) transfers, libcurl might erroneously use …9.8
• CVE-2022-32222A cryptographic vulnerability exists on Node.js on linux in …5.3
• CVE-2022-32224A possible escalation to RCE vulnerability exists when using…9.8
• CVE-2022-32225A reflected DOM-Based XSS vulnerability has been discovered …6.1
• CVE-2022-32226An improper access control vulnerability exists in Rocket.Ch…4.3
• CVE-2022-32227A cleartext transmission of sensitive information exists in …6.5
• CVE-2022-32228An information disclosure vulnerability exists in Rocket.Cha…4.3
• CVE-2022-32229A information disclosure vulnerability exists in Rockert.Cha…4.3