CVE-2022-21839

MEDIUM

Windows 10 and Windows Server 2019 - Denial of Service via Event Tracing Discretionary Access Control List

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-21839. PoCs published by lolin19.

AI-analyzed exploit summary The repository contains only a README.md file describing a script for checking the presence of CVE-2022-21839 based on IP addresses. No actual exploit code or technical details are provided.

Description

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

Exploits (1)

nomisec WRITEUP
by lolin19 · poc
https://github.com/lolin19/CVE-2022-21839-

The repository contains only a README.md file describing a script for checking the presence of CVE-2022-21839 based on IP addresses. No actual exploit code or technical details are provided.

Classification
Writeup 30%
Attack Type
Other
Complexity
Theoretical
Reliability
Theoretical
Target: unknown
No auth needed
Prerequisites: none
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

Scores

CVSS v3 6.1
EPSS 0.0151
EPSS Percentile 71.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Details

Status published
Products (2)
microsoft/windows_10 1809
microsoft/windows_server_2019
Published Jan 11, 2022
Tracked Since Feb 18, 2026