CVE-2022-41125

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Aug 10, 2026

Description

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1507>= 10.0.10240.0, < 10.0.10240.19567
MicrosoftWindows 10 Version 1607>= 10.0.14393.0, < 10.0.14393.5501
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.3650
MicrosoftWindows 10 Version 1809>= 10.0.0, < 10.0.17763.3650
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.2251
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.2251
MicrosoftWindows 10 Version 21H2>= 10.0.19043.0, < 10.0.19044.2251
MicrosoftWindows 10 Version 22H2>= 10.0.19045.0, < 10.0.19045.2251
MicrosoftWindows 11 version 21H2>= 10.0.0, < 10.0.22000.1219
MicrosoftWindows 11 version 22H2>= 10.0.22621.0, < 10.0.22621.819
MicrosoftWindows 8.1>= 6.3.0, < 6.3.9600.20671
MicrosoftWindows Server 2012>= 6.2.9200.0, < 6.2.9200.23968
MicrosoftWindows Server 2012 (Server Core installation)>= 6.2.9200.0, < 6.2.9200.23968
MicrosoftWindows Server 2012 R2>= 6.3.9600.0, < 6.3.9600.20671
MicrosoftWindows Server 2012 R2 (Server Core installation)>= 6.3.9600.0, < 6.3.9600.20671
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.5501
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.5501
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.3650
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.3650
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.1249

References

Timeline

Published
Nov 9, 2022
Last modified
Aug 10, 2026
Added to CISA KEV
Nov 8, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-411278.5Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution VulnerabilityCVE-2022-411288.8Windows Scripting Languages Remote Code Execution VulnerabilityCVE-2022-411317.8Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Hive Provider, ApCVE-2022-411326.1Unauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability in Ezoic plugin <= 2.8.8 on WordPress.CVE-2022-411338.8The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingCVE-2022-411348.8Cross-Site Request Forgery (CSRF) in OptinlyHQ Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms plugin <= 1.0.15 versioCVE-2022-411355.3Unauth. Plugin Settings Change vulnerability in Modula plugin <= 2.6.9 on WordPress.CVE-2022-411368.8Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Vladimir Anokhin's Shortcodes Ultimate plugiCVE-2022-411378.3Apache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and fetching partitions tCVE-2022-411389.8In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.CVE-2022-411395.4MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary comCVE-2022-41145.4The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as a subscriber to perf