CVE-2022-21882
Win32k Elevation of Privilege Vulnerability
KEV RANSOMWAREHIGH 7.8EPSS 59.2%
Win32k Elevation of Privilege Vulnerability
- Affected
- Microsoft · Windows 10 Version 1809 · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1909 · Windows 10 Version 21H1 · Windows Server 2022
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 MICROSOFT
- 7.0 HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 59.20% chance of exploitation in the next 30 days, 99th percentile
- CISA KEV
- added 2022-02-04, used in ransomware campaigns
- Published
- 2022-01-11
- Updated
- 2026-08-15
Proof-of-concept exploits (7)
- David-Honisch/CVE-2022-218828★ · 2022-02-01
- KaLendsi/CVE-2022-21882460★ · 2022-01-27
- L4ys/CVE-2022-21882197★ · 2022-02-04
- jessica0f0116/cve_2022_21882-cve_2021_17324★ · 2022-10-17
- r1l4-i3pur1l4/CVE-2022-218826★ · 2022-02-15
- sailay1996/cve-2022-21882-poc49★ · 2022-02-07
- Al1ex/WindowsElevation667★ · 2022-02-19
Metasploit modules (1)
Security advisories
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21882
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21882
- http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privil…