A security researcher has publicly disclosed an exploit for a Windows local privilege elevation vulnerability that allows anyone to gain admin privileges in Windows 10.
Using this vulnerability, threat actors with limited access to a compromised device can easily elevate their privileges to help spread laterally within the network, create new administrative users, or perform privileged commands. The vulnerability affects all supported support versions of Windows 10 before the January 2022 Patch Tuesday updates.
Researcher releases bypass to patched vulnerability
As part of the January 2022 Patch Tuesday, Microsoft fixed a 'Win32k Elevation of Privilege Vulnerability' vulnerability tracked as
CVE-2022-21882, which is a bypass for the previously patched and
actively exploited CVE-2021-1732 bug. Microsoft attributes the discovery of this vulnerability to
RyeLv, who
shared a technical analysis of the vulnerability after Microsoft released the patch.