fr Sign in

7.0 High Exploited · ransomware

CVE-2022-21882 Microsoft Win32k Privilege Escalation Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Known to be used

Weakness CWE-787

Description

Win32k Elevation of Privilege Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
Windows 10 Version 1809 10.0	10.0.0 → < 10.0.17763.2452	10.0.17763.2452
Windows Server 2019 10.0	10.0.17763.0 → < 10.0.17763.2452	10.0.17763.2452
Windows Server 2019 (Server Core installation) 10.0	10.0.17763.0 → < 10.0.17763.2452	10.0.17763.2452
Windows 10 Version 1909 10.0	10.0.0 → < 10.0.18363.2037	10.0.18363.2037
Windows 10 Version 21H1 10.0	10.0.0 → < 10.0.19043.1466	10.0.19043.1466
Windows Server 2022 10.0	10.0.20348.0 → < 10.0.20348.469	10.0.20348.469
Windows 10 Version 20H2 10.0	10.0.0 → < 10.0.19042.1466	10.0.19042.1466
Windows Server version 20H2 10.0	10.0.0 → < 10.0.19042.1466	10.0.19042.1466
Windows 11 version 21H2 10.0	10.0.0 → < 10.0.22000.434	10.0.22000.434

Show the other branch

Product	Affected versions	Fixed in
Windows 10 Version 21H2 10.0	10.0.19043.0 → < 10.0.19044.1466	10.0.19044.1466

References

Win32k Elevation of Privilege Vulnerability msrc.microsoft.com

Timeline

Published January 11, 2022
Added to the KEV catalogue February 4, 2022
Last modified August 15, 2026

The 5349 CVEs of Windows 10 Version 1809 →

CVE-2026-108471 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to… 8.8 High CVE-2026-108136 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.8 High CVE-2026-108129 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network 6.5 Medium CVE-2026-108132 Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally 7.0 High

Track this CVE