References https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21881 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21881 https://nvd.nist.gov/vuln/detail/cve-2022-21881 https://www.sentinelone.com/vulnerability-database/cve-2022-21881/ https://www.rapid7.com/db/vulnerabilities/msft-cve-2022-21881/ http://packetstormsecurity.com/files/168097/Race-Against-The-Sandbox.html https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2022-21881 https://www.cve.org/CVERecord?id=CVE-2022-21881 https://theabysslabs.github.io/patch-diffing/exploitation/windowskernel/2022/08/10/RaceAgainstTheSandbox.html https://blog.nsfocus.net/microsoft-monthly-2022-1/ https://www.secrss.com/articles/38233 https://www.h3c.com/cn/d_202207/1644472_30003_0.htm https://www.yunlink.net/?m=home&c=View&a=index&aid=203&lang=cn https://www.6cloudtech.com/portal/article/index/id/800.html https://www.lsgx.com.cn/info/wlaq/4586.html
Related VulnerabilitiesWindows截图工具NTLM信息泄露漏洞(CVE-2026-33829)Gradio /static//windows/win.ini 文件读取漏洞 (CVE-2026-28414)Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)PoCCVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows - Log File ExposureWindows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)Windows 11 PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)Windows 11 RAiLaunchAdminProcess 管理员保护特权提升漏洞(CVE-2025-62522)Vite开发服务器Windows环境下文件泄露漏洞(CVE-2025-41246) VMware Tools for Windows授权不当漏洞Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154)(CVE-2025-26513)SAN Host Utilities for Windows 8.0前版本安装程序本地权限提升漏洞(CVE-2025-8088) WinRAR Windows版本路径遍历漏洞可导致任意代码执行PoCCVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution