Buffer overflow in Microsoft Windows and Windows Server - CVE-2022-21882
Published: January 11, 2022 / Updated: October 17, 2022
Vulnerability identifier: #VU59413
CSH Severity: High
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-21882
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the Win32k.sys driver. A local user can run a specially crafted program to trigger a buffer overflow and execute arbitrary code on the system with elevated privileges.
Note, the vulnerability is being actively exploited in the wild.
Affected software
Microsoft Windows
Windows Server
Solutions Enabler Virtual Appliance
Solutions Enabler
Unisphere 360
Unisphere for PowerMax Virtual Appliance
Unisphere for PowerMax
VASA Provider Standalone
Windows Server
Solutions Enabler Virtual Appliance
Solutions Enabler
Unisphere 360
Unisphere for PowerMax Virtual Appliance
Unisphere for PowerMax
VASA Provider Standalone
How to mitigate CVE-2022-21882
Install updates from vendor's website.
Solutions Enabler Virtual Appliance - addressed in versions 9.1.0.19, 9.2.3.1
Solutions Enabler - addressed in versions 9.1.0.19, 9.2.3.1
Unisphere 360 - addressed in versions 9.1.0.30, 9.2.3.4
Unisphere for PowerMax Virtual Appliance - addressed in versions 9.1.0.32, 9.2.3.11
Unisphere for PowerMax - addressed in versions 9.1.0.32, 9.2.3.11
VASA Provider Standalone - addressed in versions 9.1.0.724, 9.2.3.10
Solutions Enabler - addressed in versions 9.1.0.19, 9.2.3.1
Unisphere 360 - addressed in versions 9.1.0.30, 9.2.3.4
Unisphere for PowerMax Virtual Appliance - addressed in versions 9.1.0.32, 9.2.3.11
Unisphere for PowerMax - addressed in versions 9.1.0.32, 9.2.3.11
VASA Provider Standalone - addressed in versions 9.1.0.724, 9.2.3.10
Links to Public Exploits and PoC-codes
- Exploit #8485 - cve_2022_21882-cve_2021_1732 (MS re-introduce same bug a few months after patching it) (October 17, 2022)
- Exploit #7769 - Win32k ConsoleControl Offset Confusion (May 12, 2022)
- Exploit #7682 - CVE-2022-21882 () (April 24, 2022)
- Exploit #7356 - CVE-2022-21882 () (February 16, 2022)
- Exploit #7329 - cve-2022-21882-poc (lpe poc for cve-2022-21882 ) (February 8, 2022)
- Exploit #7319 - CVE-2022-21882 () (February 4, 2022)
- Exploit #7315 - CVE-2022-21882 (CVE-2022-21882) (February 1, 2022)
- Exploit #7279 - CVE-2022-21882 (win32k LPE ) (January 27, 2022)