Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2022-21919

Windows User Profile Service Elevation of Privilege Vulnerability

Published: Jan 11, 2022
Updated: Nov 4, 2025
CVE: CVE-2022-21919
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: Medium
Score: 6.9
AV:L/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Affected Software
References

Software	From	Fixed in
microsoft / windows_server_2008	r2-sp1	r2-sp1.x
microsoft / windows_7	--sp1	--sp1.x
microsoft / windows_server_2012	r2	r2.x
microsoft / windows_server_2008	--sp2	--sp2.x
microsoft / windows_10_1809	-	10.0.17763.2452
microsoft / windows_10_1909	-	10.0.18363.2037
microsoft / windows_10_21h1	-	10.0.19043.1466
microsoft / windows_10_20h2	-	10.0.19042.1466
microsoft / windows_11_21h2	-	10.0.22000.434
microsoft / windows_10_21h2	-	10.0.19044.1466
microsoft / windows_server_2022	-	10.0.20348.469
microsoft / windows_server_20h2	-	10.0.19042.1466
microsoft / windows_10_1507	-	10.0.10240.19177
microsoft / windows_10_1607	-	10.0.14393.4886
microsoft / windows_server_2016	-	10.0.14393.4886
microsoft / windows_server_2019	-	10.0.17763.2452

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime