Actively exploited in the wild
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft - Win32k · Listed in the CISA KEV since 2022-02-04. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2022-21882
HighCVSS 7.0KEVExploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
Win32k Elevation of Privilege Vulnerability.
Risk Assessment
An attacker can elevate privileges on the system, potentially leading to full control.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows Win32k
See all- CVE-2026-34347High
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-33839High
A race condition in Windows Win32K allows an authorized attacker to locally elevate privileges due to improper synchronization during concurrent execution using shared resources.
- CVE-2026-24285High
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2025-30388High
CVE-2025-30388 involves a heap-based buffer overflow in the Win32K driver in Windows, allowing an unauthorized attacker to execute code locally.
- CVE-2022-41109High
Vulnerability in Windows Win32k allows elevation of privilege. It could be exploited to gain higher privileges on the system.
- CVE-2021-26863High
Elevation of Privilege vulnerability in Windows Win32k. Details are not provided in the description.
- CVE-2021-1732HighActively exploited
A vulnerability in the Win32k component of Windows allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
- CVE-2019-1458HighActively exploited
A vulnerability in Windows when the Win32k component fails to properly handle objects in memory allows elevation of privilege.
- CVE-2019-1132HighActively exploited
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
- CVE-2019-0859HighActively exploited
An elevation of privilege vulnerability in Windows, caused by improper handling of objects in memory by the Win32k component. A local attacker could exploit this to gain elevated privileges.
Original NVD description (English source)
Win32k Elevation of Privilege Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS