Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2022-21858: Windows Bind Filter Driver Can Be Used to Gain Elevated Access
CVE-2022-21858 · published 4 years ago
Summary
A Windows software component, called a Bind Filter Driver, has a security weakness that could allow hackers to gain unauthorized access to a system. This could lead to data theft or system compromise, so it's essential to apply the latest updates and patches to fix the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_10 |
20h2 21h1 21h2 1809 1909 cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:arm64:* |
| microsoft | windows_11 |
All versions
cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:* |
| microsoft | windows_server |
20h2 2022 cpe:2.3:o:microsoft:windows_server:20h2:*:*:*:*:*:*:* |
| microsoft | windows_server_2019 |
All versions
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* |
Original advisory text
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published11 Jan 2022
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-21858 · NVD
Track software like this
Free during beta