Actively exploited in the wild
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2022-11-08. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2022-41125
HighCVSS 7.8KEVExploitation Probability (EPSS)
High risk86th percentile - higher than 86% of all known CVEs
Summary
Elevation of privilege vulnerability in Windows CNG Key Isolation Service. An attacker could exploit it to gain elevated privileges.
Risk Assessment
Risk of privilege escalation and system integrity compromise.
Recommendation
Apply Windows security updates.
Other vulnerabilities in Windows CNG Key Isolation Service
See all- CVE-2023-28229HighActively exploited
A vulnerability in the Windows CNG Key Isolation Service allows elevation of privilege. The flaw enables a local attacker to gain higher privileges on the system.
- CVE-2023-35340High
A vulnerability in the Windows CNG Key Isolation Service allows for privilege escalation. An attacker can exploit this flaw to gain elevated privileges on the system.
Original NVD description (English source)
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability