CVE detail
CVE-2022-21919
Windows User Profile Service Elevation of Privilege Vulnerability
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 11.0 · diversity 6.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
2 source links · newest first
Products made by enterprise software development solutions provider WSO2 are affected by a critical vulnerability that has been exploited in the wild. According to WSO2’s website, its products are used by many major companies worldwide, including Fortune 500 firms, which could all be at risk.
newswww.securityweek.comApr 26, 2022, 10:41 AMems with internet key exchange (IKE). The flaw affecting Windows servers that are configured as a webserver, tracked as CVE-2022-21907 , allows unauthenticated cyber attackers to send specially crafted packets to targeted servers utilising the HTTP Protocol Stack. Microsoft also said the issue is wormable and recommends patching all affected servers as
newswww.itpro.comJan 12, 2022, 10:53 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2022-21999CVSS 7.8 · High
Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2021-41379CVSS 5.5 · Medium
Windows Installer Elevation of Privilege Vulnerability
- CVE-2022-26925CVSS 8.1 · High
Windows LSA Spoofing Vulnerability
- CVE-2022-26904CVSS 7.0 · High
Windows User Profile Service Elevation of Privilege Vulnerability
- CVE-2022-24521CVSS 7.8 · High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2022-22718CVSS 7.8 · High
Windows Print Spooler Elevation of Privilege Vulnerability
KEV listed4 mentions