CVE-2022-21894: Microsoft Windows 10 Version 1809 (Medium, CVSS 4.4)
CVE-2022-21894MediumPublic exploitMicrosoft Windows 10 Version 1809
- CVSS
- 4.4 Medium (v3.1)
- EPSS
- 6.8% chance of exploitation in the next 30 days (higher than 93.9% of CVEs)
- Exploited in the wild
- Not on CISA’s KEV list
- Public exploit
- Yes, reported in 6 GitHub repositories
- Weakness
- CWE-863
- Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N- Published
- Jan 11, 2022
What it is
Secure Boot Security Feature Bypass Vulnerability
Description from the National Vulnerability Database.
What to do
Check whether you run Microsoft Windows 10 Version 1809, then apply the vendor’s fix or mitigation from the advisories below. Because this flaw is exploited or has public exploit code, treat it as urgent and check for signs of compromise, not just the patch level.
ThreatRoundup coverage
HighCVE-2022-21894 5 Hunt Leads
BlackX Bootkit Beats Secure Boot on Fully Patched Windows
Sources: NVD, FIRST EPSS, CISA KEV, and public exploit databases (availability only). ThreatRoundup reports whether public exploit code exists but never links to it: fake proof-of-concepts that infect security researchers are common. This page updates automatically.