CVEvulnerability

CVE-2022-21860

7.0 HIGH Published 2022-01-11 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2022-01-11
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P

Description

Windows AppContracts API Server Elevation of Privilege Vulnerability

Affected configurations

• microsoft windows 10 • microsoft windows 10 20h2 • microsoft windows 10 21h1 • microsoft windows 10 21h2 • microsoft windows 10 1607 • microsoft windows 10 1809 • microsoft windows 10 1909 • microsoft windows server 20h2 • microsoft windows server 2022 • microsoft windows server 2016 • microsoft windows server 2019

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21860 msrc.microsoft.com
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21860 portal.msrc.microsoft.com