MSRC-CVE-2022-21882 — Win32k Elevation of Privilege Vulnerability

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation More Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited the vulnerability?
A local, authenticated attacker could gain elevated local system or administrator privileges through a vulnerability in the Win32k.sys driver.

Security updates
10.0.17763.2452 — https://support.microsoft.com/help/5009557
10.0.18363.2037 — https://support.microsoft.com/help/5009545
10.0.19043.1466 — https://support.microsoft.com/help/5009543
10.0.20348.469 — https://support.microsoft.com/help/5009555
10.0.22000.434 — https://support.microsoft.com/help/5009566

Vulnerabilities 1

High 7.0

CVE-2022-21882 Exploited · Ransomware Public exploit EPSS 59%

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
KEV Feb 4, 2022

Revision history

2022-01-13 #2
Corrected Active Attack entry to Yes. When this information was originally released, Microsoft was aware of limited, targeted attacks that attempt to exploit this vulnerability.
2022-01-11 #1
Information published.

References

CVE-2022-21882 Win32k Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21882
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss