CVE-2022-21901

Windows Hyper-V Elevation of Privilege Vulnerability

Critical · published January 11, 2022

CVSS v3.1
9.0
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

🔥 A sneaky flaw in Windows Hyper-V allows attackers to elevate their privileges like a magician pulling a rabbit out of a hat! Imagine a hotel where an unauthorized guest somehow gets access to the penthouse suite, gaining all the privileges of a top-tier client. This vulnerability is like that unwelcome guest, allowing a user with limited access to gain full control. This could lead to an attacker gaining complete control over the system, where they can manipulate settings, access sensitive data, or even install malicious software. It's an absolute nightmare scenario for any organization relying on Hyper-V!

Put simply

Imagine a hotel where an unauthorized guest somehow gets access to the penthouse suite, gaining all the privileges of a top-tier client. This vulnerability is like that unwelcome guest, allowing a user with limited access to gain full control. This Windows Hyper-V Elevation of Privilege Vulnerability allows an attacker to execute code at a higher privilege level than intended, potentially leading to unauthorized actions and severe breaches.

What to do

This could lead to an attacker gaining complete control over the system, where they can manipulate settings, access sensitive data, or even install malicious software. It's an absolute nightmare scenario for any organization relying on Hyper-V! To safeguard against this, ensure you're running the latest version of Windows and apply any available security patches immediately. Additionally, regularly review your Hyper-V configurations to reinforce security measures. You’ve got this! Stay vigilant and patch up, and your castle will remain secure! 🛡️

The record
Technical detail
CVSS v3.1
9.0 · CRITICAL
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00928 · 60.1th percentile
Published
2022-01-11T20:23Z
EPSS history
Timeline
  • 11 JAN 20:23Z
    Windows Hyper-V Elevation of Privilege Vulnerability
    cvelistv5