CVE Watch10 ago 2026

CVE-2022-41125

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

CVSS

7.8

Alto

EPSS

3.0%

p87

KEV

SÍ

8 nov 2022

Exploit Today

0-100

Publicado: 9 nov 2022 · Última mod.: 10 ago 2026 · CWE-787

EPSS · 30d

3.0%EPSS · 30 días3.0%

2026-08-022026-08-31

Ficha del catálogo KEV

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Añadido a KEV

8 nov 2022

Remediar antes de

9 dic 2022

Uso conocido en ransomware

Descripción resumida

Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.

Acción requerida

Apply updates per vendor instructions.

Notas

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41125; https://nvd.nist.gov/vuln/detail/CVE-2022-41125

Descripción técnica

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-826808.8 ALT

—

——0A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /load_file.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.7h CVE-2026-58106—

2.7%

——1CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper. At ldlogger-tool-gcc.c:129 the destination passed to that helper is fullPath + 2, but the size passed down is the full PATH_MAX. safe_strcpy() is strncpy(), which NUL-pads the destination out to the whole n, so this site writes 4096 bytes into the 4094 that remain — a 2-byte stack overflow on every invocation, independent of the input path's length. This issue affects CodeChecker: through 6.28.2.3d CVE-2026-183935.4 MED

16.8%

——5A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code execution.3d CVE-2026-78011—

24.6%

——7An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.3d CVE-2026-78010—

25.2%

——8A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.3d CVE-2026-78008—

23.2%

——7A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic.3d