CVE-2022-21882

CVE Enrichment

CVSS: 7.8 HIGH
EPSS: 59.21%
EPSS Percentile: 99.12%
CISA KEV: YES — Known Exploited Vulnerability

Description

Win32k Elevation of Privilege Vulnerability

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 12-Jan-2022 04:15
Last Modified: 15-Aug-2026 11:18
EPSS Date: 2026-11-08
CWE: CWE-787

CVSS Vector


            CVSS:3.1                            AV:L /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

CISA KEV Details

Date Added: 2022-02-04
Remediation Due: 2022-02-18
Known Ransomware Campaign Use: Known
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2022-21882

CNA Products / Version Status

Microsoft · Windows 10 Version 1809 Source: CNA · [email protected]
Default status: unknown

10.0.17763.0 ≤ version < 10.0.17763.2452 — affected (custom)

Platforms: 32-bit Systems, x64-based Systems
Microsoft · Windows 10 Version 1809 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.17763.2452 — affected (custom)

Platforms: ARM64-based Systems
Microsoft · Windows 10 Version 1909 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.18363.2037 — affected (custom)

Platforms: 32-bit Systems, x64-based Systems, ARM64-based Systems
Microsoft · Windows 10 Version 20H2 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.19042.1466 — affected (custom)

Platforms: 32-bit Systems, ARM64-based Systems
Microsoft · Windows 10 Version 21H1 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.19043.1466 — affected (custom)

Platforms: x64-based Systems, ARM64-based Systems, 32-bit Systems
Microsoft · Windows 10 Version 21H2 Source: CNA · [email protected]
Default status: unknown

10.0.19043.0 ≤ version < 10.0.19044.1466 — affected (custom)

Platforms: 32-bit Systems, ARM64-based Systems, x64-based Systems
Microsoft · Windows 11 version 21H2 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.22000.434 — affected (custom)

Platforms: x64-based Systems, ARM64-based Systems
Microsoft · Windows Server 2019 (Server Core installation) Source: CNA · [email protected]
Default status: unknown

10.0.17763.0 ≤ version < 10.0.17763.2452 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2019 Source: CNA · [email protected]
Default status: unknown

10.0.17763.0 ≤ version < 10.0.17763.2452 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2022 Source: CNA · [email protected]
Default status: unknown

10.0.20348.0 ≤ version < 10.0.20348.469 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server version 20H2 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.19042.1466 — affected (custom)

Platforms: x64-based Systems

Affected Products / Versions

microsoft / windows_10_1809 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.17763.2452
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
microsoft / windows_10_1809 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.17763.2452
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
microsoft / windows_10_1909 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.18363.2037
cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:*:*
microsoft / windows_10_20h2 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.19042.1466
cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*
microsoft / windows_10_21h1 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.19043.1466
cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*
microsoft / windows_10_21h2 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.19044.1466
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
microsoft / windows_11_21h2 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.22000.434
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
microsoft / windows_server_2019 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.17763.2452
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoft / windows_server_2022 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.20348.469
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoft / windows_server_20h2 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.19042.1466
cpe:2.3:o:microsoft:windows_server_20h2:*:*:*:*:*:*:*:*

References

Last enrichment sync: 09-Nov-2026 11:10
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

The latest vulnerability, a Microsoft Win32k privilege escalation vulnerability (CVE-2022-21882), was added on February 4th, 2022 and required remediation action within 14 days. Even though the CISA directive is binding Wiz Adds CISA KEV Catalog Support to Cloud Vulnerability Prioritization

Vendors (1)

Products (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.