CVE-2022-21919

HighCVSS 7.0/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Windows User Profile Service Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-59

Affected software

No affected versions have been published.

Timeline

Published
Jan 11, 2022
Last modified
Jun 17, 2026
Added to CISA KEV
Apr 25, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-21928.8Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate CVE-2022-219208.8Windows Kerberos Elevation of Privilege VulnerabilityCVE-2022-219214.4Windows Defender Credential Guard Security Feature Bypass VulnerabilityCVE-2022-219228.8Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2022-219245.3Workstation Service Remote Protocol Security Feature Bypass VulnerabilityCVE-2022-219255.3Windows BackupKey Remote Protocol Security Feature Bypass VulnerabilityCVE-2022-219267.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2022-219277.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2022-219286.4Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityCVE-2022-219292.5Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2022-21938.8Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 autCVE-2022-219304.2Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-21919: High severity, CVSS 7.0 | Vulnix