MS Windows CVE-2022-21897 权限提升漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21897
• https://nvd.nist.gov/vuln/detail/CVE-2022-21897
• https://blog.nsfocus.net/microsoft-monthly-2022-1/
• https://cloud.yovole.com/2455.html
• https://www.secrss.com/articles/38233
• https://www.yunlink.net/?m=home&c=View&a=index&aid=203&lang=cn
• https://zone.ci/aliyun/ali_nvd/72821.html
• https://www.secrss.com/articles/39107
• https://360.net/mobile/about/news/article61e50b38eec939004a2dfb45
• https://www.6cloudtech.com/portal/article/index/id/800.html

Related Vulnerabilities

• Windows截图工具NTLM信息泄露漏洞(CVE-2026-33829)
• Gradio /static//windows/win.ini 文件读取漏洞 （CVE-2026-28414）
• Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)
• PoCCVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows - Log File Exposure
• Windows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)
• Windows 11 PolicyConfiguration 计划任务特权提升漏洞（CVE-2025-60710）
• Windows 11 RAiLaunchAdminProcess 管理员保护特权提升漏洞
• （CVE-2025-62522）Vite开发服务器Windows环境下文件泄露漏洞
• (CVE-2025-41246) VMware Tools for Windows授权不当漏洞
• Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154)
• （CVE-2025-26513）SAN Host Utilities for Windows 8.0前版本安装程序本地权限提升漏洞
• (CVE-2025-8088) WinRAR Windows版本路径遍历漏洞可导致任意代码执行
• PoCCVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution