Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Microsoft · Windows
Date added (CISA)
2022-11-08
Remediation due
2022-12-09
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.