← Back to Vulnerability Reports CVE Intelligence

CVE-2022-21894

Microsoft Windows•MEDIUM · CVSS 4.4•No exploitation reported

What is CVE-2022-21894?

Secure Boot Security Feature Bypass Vulnerability

CVSS4.4 NVD 3.1

SeverityMEDIUM

ExploitationNo exploitation reported

EPSS7% · P94

Triage statusNo Known Exploit

ActionSchedule for next cycle

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

CWECWE-863

NVD published2022-01-11

NVD last modified2026-06-17

Timeline

2022-01-11Published to the U.S. National Vulnerability Database (NVD)
2026-06-17NVD record last updated
2026-10-26First covered in a defend.network daily briefing

Affected product

Microsoft Windows

NVD also lists CPE entries for: Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows 8.1, Microsoft Windows Server, Microsoft Windows Server 2012

References

Referenced in our briefings & reports

Tailscale SSH, LiteLLM supply-chain, Arista VeloCloud exploits active (2026-10-26)

Related vulnerabilities

CVE-2026-69730 – Microsoft Windows (same product)
CVE-2026-85880 – Microsoft Windows (same product)
CVE-2026-56155 – Microsoft Active Directory Federation Services (same product)
CVE-2026-41089 – Microsoft Windows Server (same product)
CVE-2026-48449 – Adobe Campaign (same vendor)
CVE-2026-96951 – Microsoft Windows (same vendor)

Microsoft: 390 known exploited vulnerabilities (CISA KEV) →

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.