CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-11-09
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability (CVE-2022-41125) Technical Advisory
[Affected Scope] Microsoft Windows operating systems including Windows 10, 11, and Windows Server 2012, 2016, 2019, 2022 utilizing the CNG Key Isolation service
[Impact] A local authenticated attacker can execute arbitrary code with SYSTEM privileges by running a specially crafted application, leading to complete system compromise
[Mitigation] Apply the official Microsoft Latest Cumulative Update (LCU) immediately and restrict local logon privileges for non-administrative users