Vulnpedia
← All CVEs

CVE-2022-21894

MEDIUM 4.4 PoC CATALOGUED ALL-YEARS

Published 2022-01-11 · Last modified 2025-01-02 · microsoft · NVD: Modified

Secure Boot Security Feature Bypass Vulnerability

REPORTED EXPLOITATION

VulnCheck KEV reports exploitation for this CVE. These are source-specific reports; review the details and vendor guidance below.

Exploitation likelihood

6.8%chance of exploitation in 30 days · 94th percentile

○ In CISA KEV● Catalogued PoC◆ SSVC: exploitation active, automatable no

Impact if exploited

4.4CVSS 3.1 · MEDIUM · CNA

  • ConfidentialityNone
  • IntegrityHigh
  • AvailabilityNone

What an attacker needs

  • ⚠Access: Requires local access to the host
  • ⚠Privileges: Requires an admin / high-privilege account
  • ✓User interaction: No user interaction needed
  • ✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

Public PoC or exploit resources are catalogued below.

Listed by the named source; Vulnpedia has not tested these resources.

PoC data: JSON

Resource commands

curl -s https://vulnpedia.com/cve/CVE-2022-21894/poc.jsonMachine-readable PoC index for this CVE (for automation).

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Microsoft

Products Windows 10 Version 1809 Windows Server 2019 Windows Server 2019 (Server Core Installation) Windows 10 Version 1909 Windows 10 Version 21h1 Windows Server 2022 Windows 10 Version 20h2 Windows Server Version 20h2 Windows 11 Version 21h2 Windows 10 Version 21h2 Windows 10 Version 1507 Windows 10 Version 1607 Windows Server 2016 Windows Server 2016 (Server Core Installation) Windows 8.1 Windows Server 2012 Windows Server 2012 (Server Core Installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core Installation) Windows 10 Windows 11 Windows Server

Weakness (CWE)

  • CWE-863: Incorrect Authorization

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

References and research data (JSON)

Unverified PoC candidates

Catalogue matches for further research. These repositories have not been validated as working exploits.

6 candidates

Additional exploitation reports

Source-specific reports, separate from CISA KEV. Repeated observations from one source are not independent confirmations.

Known Affected Software Configurations

VendorProductVersion range
MicrosoftWindows 10*
MicrosoftWindows 10*
MicrosoftWindows 1020h2
MicrosoftWindows 1020h2
MicrosoftWindows 1020h2
MicrosoftWindows 1021h1
MicrosoftWindows 1021h1
MicrosoftWindows 1021h1
MicrosoftWindows 1021h2
MicrosoftWindows 1021h2
MicrosoftWindows 1021h2
MicrosoftWindows 101607
MicrosoftWindows 101607
MicrosoftWindows 101809
MicrosoftWindows 101809
MicrosoftWindows 101809
MicrosoftWindows 101909
MicrosoftWindows 101909
MicrosoftWindows 101909
MicrosoftWindows 11*
MicrosoftWindows 11*
MicrosoftWindows 8.1*
MicrosoftWindows 8.1*
MicrosoftWindows Server20h2
MicrosoftWindows Server2022
MicrosoftWindows Server 2012*
MicrosoftWindows Server 2012r2
MicrosoftWindows Server 2016*
MicrosoftWindows Server 2019*

All CVSS metrics

  • MEDIUM 4.4 v3.1 · CNA Primary
    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
  • MEDIUM 4.4 v3.1 · NVD Secondary
    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
  • MEDIUM 4.9 v2.0 · NVD Primary
    AV:L/AC:L/Au:N/C:N/I:C/A:N

References

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS