CVE-2022-50238

The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is possible to fully synchronize the driver blocklist using WDAC policies. NOTE: The vendor explains that Windows Update provides a smaller, compatibility-focused driver blocklist for general users, while the full XML list is available for advanced users and organizations to customize at the risk of usability issues.

• CWE-820
• CWE-184

• https://github.com/wdormann/applywdac
• https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules

Published

Sep 8, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-50232In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-50233In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-50234In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2022-50235In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2022-50236In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-50237The ed25519-dalek crate before 2 for Rust allows a double pu…5.9
• CVE-2022-50239In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2022-50240In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2022-50241In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2022-50242In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-50243In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2022-50244In the Linux kernel, the following vulnerability has been re…5.5