CVE-2022-21874

HIGH IN THE WILD

Windows 10, 11, and Server - Remote Code Execution via Security Center API

Title source: llm

CVE-2022-21874 has been observed exploited in the wild (reported by InTheWild.io).

Windows Security Center API Remote Code Execution Vulnerability

Core 2

Core References

Vendor Advisory vendor-advisory

Vendor Advisory

CVSS v3 7.8

EPSS 0.0234

EPSS Percentile 81.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

InTheWild.io 2021-01-01

Status published

Products (12)

microsoft/windows_10 (2 CPE variants)

microsoft/windows_10 20h2 (3 CPE variants)

microsoft/windows_10 21h1 (3 CPE variants)

microsoft/windows_10 21h2 (3 CPE variants)

microsoft/windows_10 1607 (2 CPE variants)

microsoft/windows_10 1809 (3 CPE variants)

microsoft/windows_10 1909 (3 CPE variants)

microsoft/windows_11 (2 CPE variants)

microsoft/windows_server 20h2

microsoft/windows_server 2022

... and 2 more

Published Jan 11, 2022

Tracked Since Feb 18, 2026