CVE Catalog
Actively exploited in the wild
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2022-11-08. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2022-41125
HighCVSS 7.8KEVExploitation Probability (EPSS)
High risk3.02%
86th percentile - higher than 86% of all known CVEs
Summary
Elevation of privilege vulnerability in Windows CNG Key Isolation Service. An attacker could exploit it to gain elevated privileges.
Risk Assessment
Risk of privilege escalation and system integrity compromise.
Recommendation
Apply Windows security updates.
Original NVD description (English source)
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability