Vulnerabilities > CVE-2022-21882 - Out-of-bounds Write vulnerability in Microsoft products

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

NVD

Published: 2022-01-11

Updated: 2024-11-15

Summary

Win32k Elevation of Privilege Vulnerability

Vulnerable Configurations

Part	Description	Count
OS	Microsoft Microsoft Windows 10 1909 - Microsoft Windows 10 1909 10.0.18363.476 Microsoft Windows 10 1909 10.0.18363.535 Microsoft Windows 10 1909 10.0.18363.592 Microsoft Windows 10 1909 10.0.18363.628 Microsoft Windows 10 1909 10.0.18363.657 Microsoft Windows 10 1909 10.0.18363.693 Microsoft Windows 10 1909 10.0.18363.719 Microsoft Windows 10 1909 10.0.18363.720 Microsoft Windows 10 1909 10.0.18363.752 Microsoft Windows 10 1909 10.0.18363.753 Microsoft Windows 10 1909 10.0.18363.778 Microsoft Windows 10 1909 10.0.18363.815 Microsoft Windows 10 1909 10.0.18363.836 Microsoft Windows 10 1909 10.0.18363.900 Microsoft Windows 10 1909 10.0.18363.904 Microsoft Windows 10 1909 10.0.18363.959 Microsoft Windows 10 1909 10.0.18363.997 Microsoft Windows 10 1909 10.0.18363.1016 Microsoft Windows 10 1909 10.0.18363.1049 Microsoft Windows 10 1909 10.0.18363.1082 Microsoft Windows 10 1909 10.0.18363.1110 Microsoft Windows 10 1909 10.0.18363.1139 Microsoft Windows 10 1909 10.0.18363.1171 Microsoft Windows 10 1909 10.0.18363.1198 Microsoft Windows 10 1909 10.0.18363.1199 Microsoft Windows 10 1909 10.0.18363.1237 Microsoft Windows 10 1909 10.0.18363.1256 Microsoft Windows 10 1909 10.0.18363.1316 Microsoft Windows 10 1909 10.0.18363.1350 Microsoft Windows 10 1909 10.0.18363.1377 Microsoft Windows 10 1909 10.0.18363.1379 Microsoft Windows 10 1909 10.0.18363.1411 Microsoft Windows 10 1909 10.0.18363.1440 Microsoft Windows 10 1909 10.0.18363.1441 Microsoft Windows 10 1909 10.0.18363.1443 Microsoft Windows 10 1909 10.0.18363.1474 Microsoft Windows 10 1909 10.0.18363.1500 Microsoft Windows 10 1909 10.0.18363.1533 Microsoft Windows 10 1909 10.0.18363.1556 Microsoft Windows 10 1909 10.0.18363.1593 Microsoft Windows 10 1909 10.0.18363.1621 Microsoft Windows 10 1909 10.0.18363.1645 Microsoft Windows 10 1909 10.0.18363.1646 Microsoft Windows 10 1909 10.0.18363.1679 Microsoft Windows 10 1909 10.0.18363.1714 Microsoft Windows 10 1909 10.0.18363.1734 Microsoft Windows 10 1909 10.0.18363.1766 Microsoft Windows 10 1909 10.0.18363.1801 Microsoft Windows 10 1909 10.0.18363.1832 Microsoft Windows 10 1909 10.0.18363.1854 Microsoft Windows 10 1909 10.0.18363.1916 Microsoft Windows 10 1909 10.0.18363.1977 Microsoft Windows 10 21H1 - Microsoft Windows 10 21H1 10.0.19041.3570 Microsoft Windows 10 21H1 10.0.19043.985 Microsoft Windows 10 21H1 10.0.19043.1023 Microsoft Windows 10 21H1 10.0.19043.1052 Microsoft Windows 10 21H1 10.0.19043.1055 Microsoft Windows 10 21H1 10.0.19043.1081 Microsoft Windows 10 21H1 10.0.19043.1082 Microsoft Windows 10 21H1 10.0.19043.1083 Microsoft Windows 10 21H1 10.0.19043.1110 Microsoft Windows 10 21H1 10.0.19043.1151 Microsoft Windows 10 21H1 10.0.19043.1165 Microsoft Windows 10 21H1 10.0.19043.1202 Microsoft Windows 10 21H1 10.0.19043.1237 Microsoft Windows 10 21H1 10.0.19043.1266 Microsoft Windows 10 21H1 10.0.19043.1288 Microsoft Windows 10 21H1 10.0.19043.1320 Microsoft Windows 10 21H1 10.0.19043.1348 Microsoft Windows 10 21H1 10.0.19043.1387 Microsoft Windows 10 21H1 10.0.19043.1415 Microsoft Windows 10 20H2 - Microsoft Windows 10 20H2 10.0.19042.572 Microsoft Windows 10 20H2 10.0.19042.610 Microsoft Windows 10 20H2 10.0.19042.630 Microsoft Windows 10 20H2 10.0.19042.631 Microsoft Windows 10 20H2 10.0.19042.662 Microsoft Windows 10 20H2 10.0.19042.685 Microsoft Windows 10 20H2 10.0.19042.746 Microsoft Windows 10 20H2 10.0.19042.789 Microsoft Windows 10 20H2 10.0.19042.804 Microsoft Windows 10 20H2 10.0.19042.844 Microsoft Windows 10 20H2 10.0.19042.867 Microsoft Windows 10 20H2 10.0.19042.868 Microsoft Windows 10 20H2 10.0.19042.870 Microsoft Windows 10 20H2 10.0.19042.906 Microsoft Windows 10 20H2 10.0.19042.928 Microsoft Windows 10 20H2 10.0.19042.964 Microsoft Windows 10 20H2 10.0.19042.985 Microsoft Windows 10 20H2 10.0.19042.1023 Microsoft Windows 10 20H2 10.0.19042.1052 Microsoft Windows 10 20H2 10.0.19042.1055 Microsoft Windows 10 20H2 10.0.19042.1081 Microsoft Windows 10 20H2 10.0.19042.1082 Microsoft Windows 10 20H2 10.0.19042.1083 Microsoft Windows 10 20H2 10.0.19042.1110 Microsoft Windows 10 20H2 10.0.19042.1151 Microsoft Windows 10 20H2 10.0.19042.1165 Microsoft Windows 10 20H2 10.0.19042.1202 Microsoft Windows 10 20H2 10.0.19042.1237 Microsoft Windows 10 20H2 10.0.19042.1266 Microsoft Windows 10 20H2 10.0.19042.1288 Microsoft Windows 10 20H2 10.0.19042.1320 Microsoft Windows 10 20H2 10.0.19042.1348 Microsoft Windows 10 20H2 10.0.19042.1387 Microsoft Windows 10 20H2 10.0.19042.1415 Microsoft Windows 11 21H2 - Microsoft Windows 11 21H2 10.0.19044.2965 Microsoft Windows 11 21H2 10.0.22000.194 Microsoft Windows 11 21H2 10.0.22000.258 Microsoft Windows 11 21H2 10.0.22000.282 Microsoft Windows 11 21H2 10.0.22000.318 Microsoft Windows 11 21H2 10.0.22000.348 Microsoft Windows 11 21H2 10.0.22000.376 Microsoft Windows 10 21H2 - Microsoft Windows 10 21H2 10.0.19041.3208 Microsoft Windows 10 21H2 10.0.19041.3570 Microsoft Windows 10 21H2 10.0.19041.3693 Microsoft Windows 10 21H2 10.0.19041.3803 Microsoft Windows 10 21H2 10.0.19042.1889 Microsoft Windows 10 21H2 10.0.19042.2486 Microsoft Windows 10 21H2 10.0.19043.1889 Microsoft Windows 10 21H2 10.0.19044.1288 Microsoft Windows 10 21H2 10.0.19044.1387 Microsoft Windows 10 21H2 10.0.19044.1415 Microsoft Windows Server 2022 - Microsoft Windows Server 2022 10.0.20348.230 Microsoft Windows Server 2022 10.0.20348.261 Microsoft Windows Server 2022 10.0.20348.288 Microsoft Windows Server 2022 10.0.20348.320 Microsoft Windows Server 2022 10.0.20348.350 Microsoft Windows Server 2022 10.0.20348.380 Microsoft Windows Server 2022 10.0.20348.405 Microsoft Windows Server 2022 10.0.20348.407 Microsoft Windows Server 20H2 - Microsoft Windows Server 2019 - Microsoft Windows 10 1809 - Microsoft Windows 10 1809 10.0.17763.1 Microsoft Windows 10 1809 10.0.17763.55 Microsoft Windows 10 1809 10.0.17763.107 Microsoft Windows 10 1809 10.0.17763.134 Microsoft Windows 10 1809 10.0.17763.168 Microsoft Windows 10 1809 10.0.17763.194 Microsoft Windows 10 1809 10.0.17763.195 Microsoft Windows 10 1809 10.0.17763.253 Microsoft Windows 10 1809 10.0.17763.292 Microsoft Windows 10 1809 10.0.17763.316 Microsoft Windows 10 1809 10.0.17763.348 Microsoft Windows 10 1809 10.0.17763.379 Microsoft Windows 10 1809 10.0.17763.404 Microsoft Windows 10 1809 10.0.17763.437 Microsoft Windows 10 1809 10.0.17763.439 Microsoft Windows 10 1809 10.0.17763.475 Microsoft Windows 10 1809 10.0.17763.503 Microsoft Windows 10 1809 10.0.17763.504 Microsoft Windows 10 1809 10.0.17763.529 Microsoft Windows 10 1809 10.0.17763.557 Microsoft Windows 10 1809 10.0.17763.592 Microsoft Windows 10 1809 10.0.17763.593 Microsoft Windows 10 1809 10.0.17763.615 Microsoft Windows 10 1809 10.0.17763.652 Microsoft Windows 10 1809 10.0.17763.678 Microsoft Windows 10 1809 10.0.17763.720 Microsoft Windows 10 1809 10.0.17763.737 Microsoft Windows 10 1809 10.0.17763.740 Microsoft Windows 10 1809 10.0.17763.774 Microsoft Windows 10 1809 10.0.17763.775 Microsoft Windows 10 1809 10.0.17763.805 Microsoft Windows 10 1809 10.0.17763.832 Microsoft Windows 10 1809 10.0.17763.864 Microsoft Windows 10 1809 10.0.17763.914 Microsoft Windows 10 1809 10.0.17763.973 Microsoft Windows 10 1809 10.0.17763.1012 Microsoft Windows 10 1809 10.0.17763.1039 Microsoft Windows 10 1809 10.0.17763.1075 Microsoft Windows 10 1809 10.0.17763.1098 Microsoft Windows 10 1809 10.0.17763.1131 Microsoft Windows 10 1809 10.0.17763.1132 Microsoft Windows 10 1809 10.0.17763.1158 Microsoft Windows 10 1809 10.0.17763.1192 Microsoft Windows 10 1809 10.0.17763.1217 Microsoft Windows 10 1809 10.0.17763.1282 Microsoft Windows 10 1809 10.0.17763.1294 Microsoft Windows 10 1809 10.0.17763.1339 Microsoft Windows 10 1809 10.0.17763.1369 Microsoft Windows 10 1809 10.0.17763.1397 Microsoft Windows 10 1809 10.0.17763.1432 Microsoft Windows 10 1809 10.0.17763.1457 Microsoft Windows 10 1809 10.0.17763.1490 Microsoft Windows 10 1809 10.0.17763.1518 Microsoft Windows 10 1809 10.0.17763.1554 Microsoft Windows 10 1809 10.0.17763.1577 Microsoft Windows 10 1809 10.0.17763.1579 Microsoft Windows 10 1809 10.0.17763.1613 Microsoft Windows 10 1809 10.0.17763.1637 Microsoft Windows 10 1809 10.0.17763.1697 Microsoft Windows 10 1809 10.0.17763.1728 Microsoft Windows 10 1809 10.0.17763.1757 Microsoft Windows 10 1809 10.0.17763.1790 Microsoft Windows 10 1809 10.0.17763.1817 Microsoft Windows 10 1809 10.0.17763.1821 Microsoft Windows 10 1809 10.0.17763.1823 Microsoft Windows 10 1809 10.0.17763.1852 Microsoft Windows 10 1809 10.0.17763.1879 Microsoft Windows 10 1809 10.0.17763.1911 Microsoft Windows 10 1809 10.0.17763.1935 Microsoft Windows 10 1809 10.0.17763.1971 Microsoft Windows 10 1809 10.0.17763.1999 Microsoft Windows 10 1809 10.0.17763.2028 Microsoft Windows 10 1809 10.0.17763.2029 Microsoft Windows 10 1809 10.0.17763.2061 Microsoft Windows 10 1809 10.0.17763.2090 Microsoft Windows 10 1809 10.0.17763.2091 Microsoft Windows 10 1809 10.0.17763.2114 Microsoft Windows 10 1809 10.0.17763.2145 Microsoft Windows 10 1809 10.0.17763.2183 Microsoft Windows 10 1809 10.0.17763.2213 Microsoft Windows 10 1809 10.0.17763.2237 Microsoft Windows 10 1809 10.0.17763.2268 Microsoft Windows 10 1809 10.0.17763.2300 Microsoft Windows 10 1809 10.0.17763.2305 Microsoft Windows 10 1809 10.0.17763.2330 Microsoft Windows 10 1809 10.0.17763.2366 Microsoft Windows 10 1809 10.0.17763.2369	589

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Related news

Windows vulnerability with new public exploits lets you become admin (source)
CISA orders federal agencies to patch actively exploited Windows bug (source)
CISA Orders Federal Agencies to Patch Actively Exploited Windows Vulnerability (source)
CISA Orders Federal Agencies to Fix Actively Exploited Windows Bug (source)
A “light” February 2022 Patch Tuesday that should not be ignored (source)
Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932) (source)

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21882

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.