CVE-2022-21882

Microsoft Win32k Privilege Escalation Vulnerability

Published Jan 11, 2022 · updated Aug 14, 2026 · microsoft windows 10 1809

Win32k Elevation of Privilege Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Detection, updates, and resolution for this record.

Jan 11, 2022 · Catalog
Detected
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
Feb 4, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Feb 18, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Aug 14, 2026 · Catalog
Updated
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Apply updates per vendor instructions.

CISA due date Feb 18, 2022

CISA KEVConfirmed exploitationCVE-2022-21882
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
cisa.gov
CVE.orgVulnerability recordCVE-2022-21882
Official CVE identifier
cve.org
FIRST EPSSExploitation probabilityCVE-2022-21882
30-day exploitation probability 59.2%
first.org
Metasploit ModulesPublic exploit moduleexploit_windows/local/cve_2022_21882_win32k
Public module reference (average). Module source is not copied into this catalog.
rapid7.com
NIST NVDVulnerability recordCVE-2022-21882
Win32k Elevation of Privilege Vulnerability
nvd.nist.gov
Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html
Packet Storm link already published on the finding.
packetstormsecurity.com