Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2022-41125

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Description

Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 9 Dec 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.