CVE-2022-21882KEV · OVERDUECWE-787

Microsoft Win32k Privilege Escalation Vulnerability

High · published January 12, 2022

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.0. It is confirmed in active exploitation. It sits in the 99.1th percentile for exploit probability.

1709
days past CISA
deadline
CVSS v3.1
7.0
EPSS
59%
Percentile
99.1
In the wild
Confirmed
What it is

⚡ A sneaky elevation of privilege vulnerability in Win32k could let attackers gain higher access rights! This one is definitely a cause for concern! Think of it like a novice hotel guest sneaking into the VIP lounge using a mere guest card—once they're in, they can access all kinds of restricted services! This vulnerability could allow attackers to run malicious code with elevated privileges, potentially taking control of the entire system. With full access, they could steal sensitive information, install malware, or make changes that undermine system integrity. The stakes are high, and prompt action is essential!

Put simply

Think of it like a novice hotel guest sneaking into the VIP lounge using a mere guest card—once they're in, they can access all kinds of restricted services! CVE-2022-21882 is a Win32k elevation of privilege vulnerability that enables attackers to bypass security restrictions and execute arbitrary code with higher privileges, affecting the Windows operating environment.

What to do

This vulnerability could allow attackers to run malicious code with elevated privileges, potentially taking control of the entire system. With full access, they could steal sensitive information, install malware, or make changes that undermine system integrity. The stakes are high, and prompt action is essential! To protect yourself, ensure your systems are updated with the latest security patches from Microsoft. Regularly check for updates and consider implementing strict access controls to limit exposure. Don't wait—apply these updates now! You've got this! Stay proactive, patch those systems, and keep your environment secure! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.59205 · 99.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-01-12T02:15Z
KEV added
2022-02-04 · due 2022-02-18
Affected products (10)
ProductVersionsFixed in
microsoft/windows_10_1809< 10.0.17763.245210.0.17763.2452
microsoft/windows_10_1809< 10.0.17763.245210.0.17763.2452
microsoft/windows_10_1909< 10.0.18363.203710.0.18363.2037
microsoft/windows_10_20h2< 10.0.19042.146610.0.19042.1466
microsoft/windows_10_21h1< 10.0.19043.146610.0.19043.1466
microsoft/windows_10_21h2< 10.0.19044.146610.0.19044.1466
microsoft/windows_11_21h2< 10.0.22000.43410.0.22000.434
microsoft/windows_server_2019< 10.0.17763.245210.0.17763.2452
microsoft/windows_server_2022< 10.0.20348.46910.0.20348.469
microsoft/windows_server_20h2< 10.0.19042.146610.0.19042.1466
References (4)
EPSS history
Timeline
  • 04 FEB 00:00Z
    Added to CISA KEV — remediate by Feb 18
    kev
  • 11 JAN 20:22Z
    Win32k Elevation of Privilege Vulnerability
    cvelistv5