Microsoft patches vulnerability that lets attackers gain elevated access on Windows
It’s worth grabbing the January 2022 Patch Tuesday updates for Windows to protect your PC.
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
What you need to know
A security researcher recently shared details regarding a vulnerability in Windows that lets people gain elevated access to PCs (viaBleeping Computer). These types of vulnerabilities are relatively common and are often discovered, fixed, and then disclosed. They allow threat actors with access to a PC to open applications as an administrator or to create new admin accounts on a PC. This elevated access can then be used in various malicious ways.
Microsoft fixed the vulnerability in question, which is labeled asCVE-2022-21882, in itsJanuary 2022 Patch Tuesday updates. The vulnerability wasdiscovered by RyeLv.Will Dorman, an analyst at CERT/CC, later confirmed that the vulnerability can be used to gain elevated access.
BleepingComputer was able to use the vulnerability to open the Notepad app with elevated privileges. Lawrence Abrams, the editor in chief of BleepingComputer, clarified that while he could only get the exploit to work on Windows 10 that it does affect Windows 11.
Since the vulnerability has already been fixed, many PCs are not affected by it. BleepingComputer notes, however, that some admins skipped the January 2022 Patch Tuesday updates because of a collection of critical bugs. As a result, some PCs remain vulnerable to the exploit.
Microsoft has since released updates to address the issues in the January 2022 Patch Tuesday updates, so it’s probably worth upgrading now. If admins still decide to wait, all of the aforementioned fixes should ship to PCs in February 2022.
Get the Windows Central Newsletter
All the latest news, reviews, and guides for Windows and Xbox diehards.
Sean Endicott is a tech journalist at Windows Central, specializing in Windows, Microsoft software, AI, and PCs. He’s covered major launches, from Windows 10 and 11 to the rise of AI tools like ChatGPT. Sean’s journey began with the Lumia 740, leading to strong ties with app developers. Outside writing, he coaches American football, utilizing Microsoft services to manage his team. He studied broadcast journalism at Nottingham Trent University and is active on X @SeanEndicott_ and Threads @sean_endicott_.
