CVE-2022-21922
Published: 11 January 2022
Summary
CVE-2022-21922 is a high-severity an unspecified weakness vulnerability in Microsoft Windows 10. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 7.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-21922 is a Remote Procedure Call Runtime Remote Code Execution Vulnerability affecting the RPC runtime component in Windows. It carries a CVSS 3.1 base score of 8.8 with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that successful exploitation can result in complete loss of confidentiality, integrity, and availability on the target system.
An attacker with low-privileged network access and no user interaction required can trigger the flaw to execute arbitrary code in the context of the vulnerable RPC service. Because the scope is unchanged and the impacts are rated high across all three security properties, successful exploitation can lead to full system compromise from a remote position.
Microsoft security advisories for CVE-2022-21922, published on the MSRC portal, direct administrators to the corresponding security updates that address the vulnerability. The EPSS score has remained flat at a peak of 0.0874 with no material increase observed after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-27078
Vulnerability details
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.