coldbraid

CVE-2022-41125 Microsoft Windows

Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.

CVSS
not scored

CWE-787

On CISA’s exploited list

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Added
2022-11-08
Federal patch deadline
2022-12-09
Ransomware use
not known