Proof-of-Concept Code Now Available for an Exploited Windows Local Privilege Escalation Vulnerability

FortiGuard Labs reports that CVE-2022-21882, a Win32k.sys local privilege escalation vulnerability (CVSS 7.0), is being exploited in the wild and that a publicly available proof-of-concept has been released; Microsoft issued a patch on January 11, 2022. The advisory notes increased attack risk due to the PoC, confirms FortiGuard IPS and AV signatures covering the issue, and advises that the flaw is typically used by attackers who already have local/authenticated access or as part of chained exploits.