CVE Catalog

Actively exploited in the wild

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft - Win32k · Listed in the CISA KEV since 2022-02-04. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2022-21882

HighCVSS 7.0KEV
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
54.55%

99th percentile - higher than 99% of all known CVEs

Summary

Win32k Elevation of Privilege Vulnerability.

Risk Assessment

An attacker can elevate privileges on the system, potentially leading to full control.

Recommendation

Apply the latest Windows security updates.

Original NVD description (English source)

Win32k Elevation of Privilege Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS