CVE-2022-21898

HIGH IN THE WILD

Windows 10 and Windows Server 2019 - Remote Code Execution in DirectX Graphics Kernel

Title source: llm

CVE-2022-21898 has been observed exploited in the wild (reported by InTheWild.io).

DirectX Graphics Kernel Remote Code Execution Vulnerability

Core 2

Core References

Vendor Advisory vendor-advisory

Vendor Advisory

CVSS v3 7.8

EPSS 0.0241

EPSS Percentile 82.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

InTheWild.io 2021-01-01

Status published

Products (8)

microsoft/windows_10 20h2 (3 CPE variants)

microsoft/windows_10 21h1 (3 CPE variants)

microsoft/windows_10 21h2 (3 CPE variants)

microsoft/windows_10 1809 (3 CPE variants)

microsoft/windows_10 1909 (3 CPE variants)

microsoft/windows_server 20h2

microsoft/windows_server 2022

microsoft/windows_server_2019

Published Jan 11, 2022

Tracked Since Feb 18, 2026