First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-21996

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Win32k Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Windows 11 version 21H2	>= 10.0.0, < 10.0.22000.493

References

Timeline

Published: Feb 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-219977.1Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-219985.5Windows Common Log File System Driver Information Disclosure Vulnerability CVE-2022-219997.8Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-22008.8If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading t CVE-2022-220007.8Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2022-220017.8Windows Remote Access Connection Manager Elevation of Privilege Vulnerability CVE-2022-220025.5Windows User Account Profile Picture Denial of Service Vulnerability CVE-2022-220037.8Microsoft Office Graphics Remote Code Execution Vulnerability CVE-2022-220047.8Microsoft Office ClickToRun Remote Code Execution Vulnerability CVE-2022-220058.8Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2022-220067.8HEVC Video Extensions Remote Code Execution Vulnerability CVE-2022-220077.8HEVC Video Extensions Remote Code Execution Vulnerability