CVE-2022-21882

Microsoft Win32k privilege escalation vulnerability (CVE-2022-21882) was actively exploited in the wild before patching.

This unpatched privilege escalation flaw in Microsoft Win32k allowed attackers to escalate privileges on Windows systems, leading to potential full system compromise. DIB organizations must ensure all Windows endpoints are patched immediately and monitor for exploitation attempts, as this vulnerability was listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.

Shame score — A critical privilege escalation vulnerability in a core Windows component was actively exploited in the wild before Microsoft released a patch, demonstrating severe negligence in patch management and vulnerability disclosure.