References https://www.51cto.com/article/701023.html https://rivers.chaitin.cn/blog/cq951890lnechd244h9g https://www.anquanke.com/post/id/272305 https://avd.aliyun.com/detail?id=AVD-2022-21882 https://shuyeidc.com/wp/137563.html https://jiwo.org/ken/detail.php?id=3026 https://blog.nsfocus.net/microsoft-monthly-2022-1/ https://www.wanganke.com/web/article/show/3932 http://nic.cqrk.edu.cn/2022_01/13_15/content-24590.html https://www.secrss.com/articles/38233 https://www.saury.net/118.html https://it.ruc.edu.cn/wlaq/2e0260d429694544801c7c7bc0ced04c.htm https://www.yunlink.net/?m=home&c=View&a=index&aid=203&lang=cn https://github.com/binganao/vulns-2022 https://nvd.nist.gov/vuln/detail/cve-2022-21882 https://www.sentinelone.com/vulnerability-database/cve-2022-21882/ https://unit42.paloaltonetworks.com/win32k-analysis-part-2/ https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2022/CVE-2022-21882.html https://www.fortiguard.com/outbreak-alert/html/win32k-privilege-escalation https://www.deepwatch.com/labs/exploit-code-released-for-windows-10-vulnerability/ https://www.quorumcyber.com/threat-intelligence/windows-vulnerability-allows-for-privilege-escalation/ https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2022_21882_win32k.rb https://borncity.com/win/2022/01/31/windows-10-proof-of-concept-fr-schwachstelle-cve-2022-21882/ https://securityaffairs.com/127377/hacking/cve-2022-21882-win-local-privilege-elevation.html https://www.rapid7.com/db/modules/exploit/windows/local/cve_2022_21882_win32k/
Related VulnerabilitiesWindows截图工具NTLM信息泄露漏洞(CVE-2026-33829)Gradio /static//windows/win.ini 文件读取漏洞 (CVE-2026-28414)Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)PoCCVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows - Log File ExposureWindows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)Windows 11 PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)Windows 11 RAiLaunchAdminProcess 管理员保护特权提升漏洞(CVE-2025-62522)Vite开发服务器Windows环境下文件泄露漏洞(CVE-2025-41246) VMware Tools for Windows授权不当漏洞Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154)(CVE-2025-26513)SAN Host Utilities for Windows 8.0前版本安装程序本地权限提升漏洞(CVE-2025-8088) WinRAR Windows版本路径遍历漏洞可导致任意代码执行PoCCVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution