PatchTheCVECVE-2022-23748: Dante Discovery Process Control Vulnerability
CVE-2022-23748 is a high-severity flaw (CVSS 7.8) affecting dante application library, reported as exploited in the wild. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.
Why this priority
- High severity
- EPSS top 5%: very likely to be exploited
- Exploited in the wild (CISA KEV)
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Exploited Added to the CISA Known Exploited Vulnerabilities list
- Deadline CISA due date for US federal agencies to patch
- Updated Record last modified
Exact fixes by distribution
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-23748?
dante application library: upgrade to newer than 1.2.0. Exact commands for each OS are on this page.
Is CVE-2022-23748 being exploited?
Yes. CVE-2022-23748 is on the CISA Known Exploited Vulnerabilities list, so treat it as patch-now.
What does CVE-2022-23748 affect?
CVE-2022-23748 affects dante application library. Severity is high (CVSS 7.8). mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate ex
How urgent is CVE-2022-23748?
Priority 76/100. High severity; EPSS top 5%: very likely to be exploited; Exploited in the wild (CISA KEV)