CVE-2022-21970

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L

Weakness enumeration

CWE-269

Affected software

VendorProductVersions
MicrosoftMicrosoft Edge (Chromium-based)>= 1.0.0, < 97.0.1072.55

References

Timeline

Published
Jan 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-219717.8Windows Runtime Remote Code Execution VulnerabilityCVE-2022-219728.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-219735.5Windows Media Center Update Denial of Service VulnerabilityCVE-2022-219747.8Roaming Security Rights Management Services Remote Code Execution VulnerabilityCVE-2022-219754.7Windows Hyper-V Denial of Service VulnerabilityCVE-2022-219773.3Media Foundation Information Disclosure VulnerabilityCVE-2022-219788.2Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-219794.8Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2022-21984.3The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displCVE-2022-219808.0Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-219817.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2022-219837.5Win32 Stream Enumeration Remote Code Execution Vulnerability
CVE-2022-21970: Medium severity, CVSS 6.1 | Vulnix