CVE-2022-21863

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Windows StateRepository API Server file Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.2452
MicrosoftWindows 10 Version 1809>= 10.0.0, < 10.0.17763.2452
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.2452
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.2452
MicrosoftWindows 10 Version 1909>= 10.0.0, < 10.0.18363.2037
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.1466
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.469
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.1466
MicrosoftWindows Server version 20H2>= 10.0.0, < 10.0.19042.1466
MicrosoftWindows 10 Version 21H2>= 10.0.19043.0, < 10.0.19044.1466
MicrosoftWindows 10 Version 1607>= 10.0.14393.0, < 10.0.14393.4886
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.4886
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.4886

References

Timeline

Published
Jan 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-218647.0Windows UI Immersive Server API Elevation of Privilege VulnerabilityCVE-2022-218657.0Connected Devices Platform Service Elevation of Privilege VulnerabilityCVE-2022-218667.0Windows System Launcher Elevation of Privilege VulnerabilityCVE-2022-218677.0Windows Push Notifications Apps Elevation of Privilege VulnerabilityCVE-2022-218687.0Windows Devices Human Interface Elevation of Privilege VulnerabilityCVE-2022-218697.8Clipboard User Service Elevation of Privilege VulnerabilityCVE-2022-21876.1The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in CVE-2022-218707.8Tablet Windows User Interface Application Core Elevation of Privilege VulnerabilityCVE-2022-218717.8Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege VulnerabilityCVE-2022-218727.8Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2022-218737.8Tile Data Repository Elevation of Privilege VulnerabilityCVE-2022-218749.8Windows Security Center API Remote Code Execution Vulnerability
CVE-2022-21863: High severity, CVSS 7.0 | Vulnix