CVE-2022-21882

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Aug 15, 2026

Description

Win32k Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jan 11, 2022
Last modified
Aug 15, 2026
Added to CISA KEV
Feb 4, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-218837.5Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityCVE-2022-218847.8Local Security Authority Subsystem Service Elevation of Privilege VulnerabilityCVE-2022-218857.8Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2022-218877.8Win32k Elevation of Privilege VulnerabilityCVE-2022-218887.8Windows Modern Execution Server Remote Code Execution VulnerabilityCVE-2022-218897.5Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityCVE-2022-21896.1The WP Video Lightbox WordPress plugin before 1.9.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an atCVE-2022-218907.5Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityCVE-2022-218914.3Microsoft Dynamics 365 (on-premises) Spoofing VulnerabilityCVE-2022-218926.8Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityCVE-2022-218938.0Remote Desktop Protocol Remote Code Execution VulnerabilityCVE-2022-218944.4Secure Boot Security Feature Bypass Vulnerability
CVE-2022-21882: High severity, CVSS 7.8 | Vulnix