CVE-2022-41125
KEVMicrosoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
View CVE record →- Vendor / Project
- Microsoft
- Product
- Windows
- Date added
- Nov 8, 2022
- Due date
- Dec 9, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-787
Description
Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.
Required action
Apply updates per vendor instructions.