{"metadata": {"vulnerability": "CVE-2022-21999", "count": 87, "kinds": {"milestone": 6, "sighting": 35, "kev": 11, "other": 35}}, "data": [{"timestamp": "2021-12-16T00:00:00Z", "date_only": false, "value": "2021-12-16T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-21999", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-02-08T00:00:00Z", "date_only": false, "value": "2022-02-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0303", "record": "VAR-202202-0303", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-02-08T08:00:00Z", "date_only": false, "value": "2022-02-08T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-21999", "record": "MSRC_CVE-2022-21999", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-02-08T08:00:00Z", "date_only": false, "value": "2022-02-08T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-21999", "record": "MSRC_CVE-2022-21999", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-02-08T08:00:00Z", "date_only": false, "value": "2022-02-08T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2022-21999", "field": "containers.cna.datePublic"}, {"timestamp": "2022-02-08T08:00:00Z", "date_only": false, "value": "2022-02-08T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-21999", "record": "MSRC_CVE-2022-21999", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": false, "value": "2022-02-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0303", "record": "VAR-202202-0303", "field": "sources_release_date.data.0.date"}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": false, "value": "2022-02-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-130", "record": "CERTFR-2022-AVI-130", "field": "last_revision_date"}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": false, "value": "2022-02-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-130", "record": "CERTFR-2022-AVI-130", "field": "initial_release_date"}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": false, "value": "2022-02-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-130", "record": "CERTFR-2022-AVI-130", "field": "revisions.0.revision_date"}, {"timestamp": "2022-02-09T04:00:00Z", "date_only": false, "value": "2022-02-09T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=736", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "9e1bc99c-dfbf-4178-8843-df9f6c5e940f", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=736"}, {"timestamp": "2022-02-09T08:00:00Z", "date_only": false, "value": "2022-02-09T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-21999", "record": "MSRC_CVE-2022-21999", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-02-09T08:00:00Z", "date_only": false, "value": "2022-02-09T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-21999", "record": "MSRC_CVE-2022-21999", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-02-09T16:36:50Z", "date_only": false, "value": "2022-02-09T16:36:50.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-21999", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-02-09T17:15:00Z", "date_only": false, "value": "2022-02-09T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9CR3-63PG-942X", "record": "GHSA-9CR3-63PG-942X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-02-09T17:15:00Z", "date_only": false, "value": "2022-02-09T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-21999", "record": "GSD-2022-21999", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-02-09T17:15:09.563Z", "date_only": false, "value": "2022-02-09T17:15:09.563000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0303", "record": "VAR-202202-0303", "field": "sources_release_date.data.3.date"}, {"timestamp": "2022-02-09T17:15:09.563Z", "date_only": false, "value": "2022-02-09T17:15:09.563", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-21999", "record": "FKIE_CVE-2022-21999", "field": "published"}, {"timestamp": "2022-02-10T00:00:00Z", "date_only": true, "value": "2022-02-10", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-22717", "record": "CNVD-2022-22717", "field": "submitTime"}, {"timestamp": "2022-02-10T00:00:23Z", "date_only": false, "value": "2022-02-10T00:00:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9CR3-63PG-942X", "record": "GHSA-9CR3-63PG-942X", "field": "published"}, {"timestamp": "2022-02-16T00:00:00Z", "date_only": false, "value": "2022-02-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0303", "record": "VAR-202202-0303", "field": "sources_release_date.data.1.date"}, {"timestamp": "2022-02-16T08:30:00Z", "date_only": false, "value": "2022-02-16T08:30:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0303", "record": "VAR-202202-0303", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-03-16T13:56:13Z", "date_only": false, "value": "2022-03-16T13:56:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2022_21999_spoolfool_privesc.rb", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "7b2a55f0-dfab-4773-b669-b5e988719d66", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2022_21999_spoolfool_privesc.rb"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-21999", "field": "timestamps.asserted_at", "uuid": "b1a40c16-b0fe-48a0-a21a-e6e3c3a78a87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-21999", "field": "timestamps.asserted_at", "uuid": "9d268cc5-5eea-428f-a10e-f54e971e3ae0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-21999", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2022-21999", "record": "GSD-2022-21999", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-21999", "field": "evidence.0.details.added_date", "uuid": "9d268cc5-5eea-428f-a10e-f54e971e3ae0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-21999", "field": "evidence.0.details.date_added", "uuid": "b1a40c16-b0fe-48a0-a21a-e6e3c3a78a87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-21999", "field": "timestamps.first_seen_at", "uuid": "b1a40c16-b0fe-48a0-a21a-e6e3c3a78a87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-21999", "field": "timestamps.first_seen_at", "uuid": "9d268cc5-5eea-428f-a10e-f54e971e3ae0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-22717", "record": "CNVD-2022-22717", "field": "openTime"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-21999", "field": "status.status_updated_at", "uuid": "b1a40c16-b0fe-48a0-a21a-e6e3c3a78a87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-21999", "field": "status.status_updated_at", "uuid": "9d268cc5-5eea-428f-a10e-f54e971e3ae0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-21999", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-03-25T16:16:29Z", "date_only": false, "value": "2022-03-25T16:16:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverse_dungeon/1515", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "a87b0e62-1638-47fb-81c0-f7c33ec97b62", "content": "Windows Privilege Escalation: SpoolFool\n\u041f\u0430\u0442\u0447\u0438\u043b\u0438, \u0444\u0438\u043a\u0441\u0438\u043b\u0438  CVE-2020-1048 \u0438  CVE-2020-1337, \u0430 \u0434\u044b\u0440\u0430 \u043e\u0441\u0442\u0430\u043b\u0430\u0441\u044c.\n\u041e\u0442\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-21999 (\u00abSpoolFool\u00bb) \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0430 NT AUTHORITY\\\\SYSTEM. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u044b 2 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430 \u0430\u0442\u0430\u043a\u0438. \n\u041a\u0430\u043a \u043f\u0440\u043e\u043b\u0435\u0437\u0442\u044c \u0432 \u043c\u0438\u0440 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u043e\u0432 \u0431\u0435\u0437 \u0432\u0430\u0437\u0435\u043b\u0438\u043d\u0430, \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0435\u0442 \u0440\u0430\u0441\u043e\u0432\u043e \u0432\u0435\u0440\u043d\u044b\u0439 \u0438\u043d\u0434\u0443\u0441 Harshit Rajpal\n\u0427\u0438\u0442\u0430\u0435\u043c \u0442\u0443\u0442.\n#windows #LPE", "url": "https://t.me/reverse_dungeon/1515"}, {"timestamp": "2022-03-25T16:36:11Z", "date_only": false, "value": "2022-03-25T16:36:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/748", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "5a7acc3b-ed14-4d24-bef3-070ac03f9338", "content": "Windows Privilege Escalation: SpoolFool\n\u041f\u0430\u0442\u0447\u0438\u043b\u0438, \u0444\u0438\u043a\u0441\u0438\u043b\u0438  CVE-2020-1048 \u0438  CVE-2020-1337, \u0430 \u0434\u044b\u0440\u0430 \u043e\u0441\u0442\u0430\u043b\u0430\u0441\u044c.\n\u041e\u0442\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-21999 (\u00abSpoolFool\u00bb) \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0430 NT AUTHORITY\\\\SYSTEM. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u044b 2 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430 \u0430\u0442\u0430\u043a\u0438. \n\u041a\u0430\u043a \u043f\u0440\u043e\u043b\u0435\u0437\u0442\u044c \u0432 \u043c\u0438\u0440 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u043e\u0432 \u0431\u0435\u0437 \u0432\u0430\u0437\u0435\u043b\u0438\u043d\u0430, \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0435\u0442 \u0440\u0430\u0441\u043e\u0432\u043e \u0432\u0435\u0440\u043d\u044b\u0439 \u0438\u043d\u0434\u0443\u0441 Harshit Rajpal\n\u0427\u0438\u0442\u0430\u0435\u043c \u0442\u0443\u0442.\n#windows #LPE", "url": "https://t.me/proxy_bar/748"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": true, "value": "2022-04-15", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-21999", "field": "evidence.0.details.due_date", "uuid": "b1a40c16-b0fe-48a0-a21a-e6e3c3a78a87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": true, "value": "2022-04-15", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2022-21999", "record": "GSD-2022-21999", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-09-30T01:59:22Z", "date_only": false, "value": "2022-09-30T01:59:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/technical_private_cat/203", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "ed441dd2-4e4f-489f-b9bb-5ce541244508", "content": "\u041f\u0440\u0438\u0432\u0435\u0442, \u043a\u043e\u0442\u043a\u0438.  \ud83d\udc31\n\u042d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u044f \u0440\u0435\u0448\u0438\u043b\u0430 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043a\u0430\u043a \u0441\u0431\u043e\u0440\u043d\u0438\u043a \u043c\u0430\u0442\u0435\u0440\u044c\u044f\u043b\u0430, \u043d\u043e \u043d\u0435 \u0431\u0435\u0433\u0438\u0442\u0435 \u0440\u0430\u0441\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u0443\u0442 \u043c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e. \n\u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0431\u043e\u0440\u043d\u0438\u043a\u0438 \u043c\u0430\u0442\u0435\u0440\u044c\u044f\u043b\u0430,  \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 poc,  \u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u043a\u0440\u0443\u0442\u044b\u0435 \u0441\u0442\u0430\u0442\u044c\u0438!\ud83d\udd11\n\n\u041f\u0430\u043c - \u0425\u043e\u0440\u043e\u0448\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043f\u0440\u043e \u043f\u0440\u0435\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u0432\u0435\u043b\u0438\u043a\u0438\u0439 \u0438 \u043a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \n\n\u041f\u0430\u043c -  \u0421\u0442\u0430\u0442\u044c\u044f \u043f\u0440\u043e \u043f\u0440\u0435\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u0432\u0438\u043d\u0434\u0435.  \u0412 \u043d\u0435\u0439 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u044e\u0442\u0441\u044f \u0442\u0435\u043c\u044b \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a:  \u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043f\u043e\u0442\u043e\u043a\u0430 \u0438 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u043e\u0442\u043e\u043a\u0430; SMEP, \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u044f\u0434\u0440\u0430; ASLR, DEP \u0438 \u0432\u0441\u0435 \u0442\u0430\u043a\u043e\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u044f\u0434\u0440\u0430; \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \n\n\u041f\u0430\u043c - \u0421\u0431\u043e\u0440\u043d\u0438\u043a \u043c\u0430\u0442\u0435\u0440\u044c\u044f\u043b\u043e\u0432 \u043d\u0430 \u0433\u0438\u0442\u0445\u0430\u0431\u0435 \u043f\u0440\u043e \u043f\u0440\u0435\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0442\u0430\u043c \u0435\u0441\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u043c\u0430\u0442\u0435\u0440\u044c\u044f\u043b\u044b \u043a\u0430\u043a: \u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e; \u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439; \u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 EoP \u2014 \u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u043d\u0430\u043b\u044b; EoP \u2014 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044f\u0434\u0440\u0430. \u0418 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0447\u0435\u0433\u043e \u0435\u0449\u0435,  \u0434\u0443\u043c\u0430\u044e \u043a\u043e\u043c\u0443-\u0442\u043e \u0442\u043e\u0447\u043d\u043e \u043f\u0440\u0438\u0433\u043e\u0434\u0438\u0442\u044c\u0441\u044f \n\n\u041f\u0430\u043c - \u042d\u0442\u043e\u0442 \u0441\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e , \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u0430 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \n\n\u041f\u0430\u043c- \u0421\u0431\u043e\u0440\u043d\u0438\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u043f\u0440\u0435\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 windows \u0438 poc \u043d\u0430 \u043d\u0438\u0445.  \u0422\u0430\u043c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \n\n\u041f\u0430\u043c- \u041f\u0440\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c,  WADComs  \u0448\u043f\u0430\u0440\u0433\u0430\u043b\u043a\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0430\u044f  \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438,  \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0441\u0440\u0435\u0434\u0430\u0445 Windows.\n\n\u041f\u0430\u043c - \u041f\u0440\u043e  CVE 2022-29072 \u2014 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435/\u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u0435 \u0432 Powershell\n\n\u041f\u0430\u043c - \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2022-21999 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438 Windows, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \n\n\u041f\u0430\u043c - \u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043d\u0430 \u043d\u0430\u0448\u0443\u043c\u0435\u0432\u0448\u0443\u044e CVE-2022-21882\n\n\u041f\u0430\u043c - \u041d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043c\u0430\u043d\u0443\u043b \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u0435\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\n#windows #attacks #cve #exploit", "url": "https://t.me/technical_private_cat/203"}, {"timestamp": "2022-10-07T02:04:31Z", "date_only": false, "value": "2022-10-07T02:04:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/clcEmNxhZcHi4To_RQ1A8YVZFlVzgq1IWTEDSznqQFJxcxU", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "299ccac6-6128-4724-a275-f9f27745a603"}, {"timestamp": "2022-10-30T15:50:43Z", "date_only": false, "value": "2022-10-30T15:50:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/technical_private_cat/288", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "8d907f9d-37b5-4a48-9a67-5818af739ac5", "content": "\u0415\u0449\u0435 \u0440\u0430\u0437 \u0434\u043e\u0431\u0440\u044b\u0439 \u0434\u0435\u043d\u044c \u043c\u043e\u0438 \u0447\u0435\u0448\u0438\u0440\u0441\u043a\u0438\u0435 \u043a\u043e\u0442\u0438\u043a\u0438   \ud83d\udc08\ud83c\udfa9\n\n\u0412\u043e\u0442 \u0432\u0430\u043c \u043f\u043e\u0441\u0442-\u0441\u0431\u043e\u0440\u043d\u0438\u043a \u043f\u0440\u043e windows . \ud83c\udfaf\n\u0422\u043e\u0447\u043d\u0435\u0435 \u043f\u0440\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 ,\u0438  \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u0441\u0442\u0430\u0442\u044c\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044d\u043d\u043d\u043e\u0439 .\n\u041f\u043e\u0441\u0442 \u0441\u0434\u0435\u043b\u0430\u043d \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445 \u0438 \u0434\u043b\u044f \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u0432\u0430\u0448\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 . \n\n\u041d\u0430\u0434\u0435\u044e\u0441\u044c \u0432\u0430\u043c \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u043e:\nWindows-RCE-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b\nWindows-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043d\u0430 \u043c\u043d\u043e\u0433\u0438\u0435 cve \u043e\u0442 2012 \u0434\u043e 2017\n\u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043d\u0430 CVE-2022-21907 \u0435\u0449\u0435 \u0442\u044b\u043a \n\u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043d\u0430 CVE-2022-21999\n\u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043d\u0430 CVE-2022-29072\n\u0421\u0431\u043e\u0440\u043d\u0438\u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043d\u0430 cve 2022 \u0433\u043e\u0434\u0430\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 Microsoft Security Response Center (MSRC)\nPrivatezilla -\u0438\u043d\u0442\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\nGood afternoon again my Cheshire cats \ud83d\udc08\ud83c\udfa9\n\nHere's a post-collection for you about windows . \ud83c\udfaf\nMore precisely about the different exploits for its various vulnerabilities , and tools and articles on security enna .\nThis post is only for introductory purposes and to improve your security. \n\nI hope you will find it useful:\nWindows-RCE-exploits\nWindows exploits for many cve from 2012 to 2017 \nExploits for CVE-2022-21907 more link \nExploits for CVE-2022-21999\nExploits for CVE-2022-29072 \nA collection of various exploits for cve 2022\nSecurity research from Microsoft Security Response Center (MSRC)\nPrivatezilla security tool\n#windows #attacks #cve #exploit #polymorphic #pentest", "url": "https://t.me/technical_private_cat/288"}, {"timestamp": "2022-11-19T11:29:33Z", "date_only": false, "value": "2022-11-19T11:29:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/technical_private_cat/204", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "ed4d7019-7d97-4053-90bc-d56b265aa838", "content": "Hello, cats.  \ud83d\udc31\nI decided to make this post as a collection of stuff, but don't get upset, there is a lot of useful stuff here. \nFor example various other compilations of material, various vulnerabilities and poc, and of course cool articles!\ud83d\udd11\n\nLink - A good article about exceeding a threshold and how it works \n\nLink - A good article about overriding privileges on the wind.  It deals with topics such as:  Flow control and reverse flow protection; SMEP, preventing execution of trivial kernel code; ASLR, DEP and stuff like that, including limiting kernel leaks; Using memory corruption \n\nLink - A collection of matertials on the githab about privilege overruns there are matertials like: Tools for this; Enumerating users; Enumerating the EoP network - named channels; EoP - Exploiting the kernel. And a lot more, I think someone will definitely find it useful \n\nLink - This script is for listing common Windows configuration problems that can be used to raise privileges locally. It also collects different information which can be useful for exploiting privilege overrides \n\nLink - A collection of windows privilege override vulnerabilities and poc on them.  There are quite a few different \n\nLink - About security, WADComs cheat sheet containing a list of offensive security tools you can use in Windows environments.\n\nLink - About  CVE 2022-29072 - Powershell detection/mitigation\n\nLink - Exploit for CVE-2022-21999 - Windows Print Queue Manager vulnerability related to privilege gaining \n\nLink - Exploit for notorious CVE-2022-21882\n\nLink - Little manulet with exploits for privilege escalation\n#windows #attacks #cve #exploit", "url": "https://t.me/technical_private_cat/204"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "876b16de-19fb-472f-aea5-f39a820318ef"}, {"timestamp": "2023-06-29T05:15:00Z", "date_only": false, "value": "2023-06-29T05:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-21999", "record": "GSD-2022-21999", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-06-30T00:00:00Z", "date_only": false, "value": "2023-06-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0303", "record": "VAR-202202-0303", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": false, "value": "2023-08-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0303", "record": "VAR-202202-0303", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-09-06T13:44:31Z", "date_only": false, "value": "2023-09-06T13:44:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/bd1c3290-9486-4bf9-ae59-fe17c0948133", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "82d81613-5ba2-46ec-a5c5-0651538a03a9"}, {"timestamp": "2023-12-13T01:19:14.766Z", "date_only": false, "value": "2023-12-13T01:19:14.766907Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-21999", "record": "GSD-2022-21999", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-07-16T17:47:26.240Z", "date_only": false, "value": "2024-07-16T17:47:26.240000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0303", "record": "VAR-202202-0303", "field": "sources_update_date.data.3.date"}, {"timestamp": "2024-07-17T22:17:43.678Z", "date_only": false, "value": "2024-07-17T22:17:43.678000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202202-0303", "record": "VAR-202202-0303", "field": "last_update_date"}, {"timestamp": "2024-08-03T03:00:54.950Z", "date_only": false, "value": "2024-08-03T03:00:54.950Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-21999", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-11T22:00:31Z", "date_only": false, "value": "2024-10-11T22:00:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5380", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "b5d25e7a-f021-42d7-abf8-58d9808fbe5a", "content": "#exploit\n1. CVE-2022-21241:\nCSV+ 0.8.0 - 2-Click Arbitrary Code Execution\nhttps://github.com/satoki/csv-plus_vulnerability\n\n2. CVE-2022-21999, CVE-2022-22718:\nSpoolFool - Windows Print Spooler Privilege Escalation\nhttps://research.ifcr.dk/spoolfool-windows-print-spooler-privilege-escalation-cve-2022-22718-bf7752b68d81\n]-> The functional exploit and DLL:\nhttps://github.com/ly4k/SpoolFool", "url": "https://t.me/CyberSecurityTechnologies/5380"}, {"timestamp": "2024-12-24T20:29:33.212Z", "date_only": false, "value": "2024-12-24T20:29:33.212237Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971452", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "eb6f7b48-5ba5-419b-ab77-9370d27503a2", "url": "https://feedsin.space/feed/CISAKevBot/items/2971452"}, {"timestamp": "2025-01-02T18:27:58.995Z", "date_only": false, "value": "2025-01-02T18:27:58.995Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-21999", "record": "MSRC_CVE-2022-21999", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-02T18:28:21.478Z", "date_only": false, "value": "2025-01-02T18:28:21.478Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2022-21999", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-29T20:35:32.807Z", "date_only": false, "value": "2025-01-29T20:35:32.807940Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-21999", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-29T20:35:32.807Z", "date_only": false, "value": "2025-01-29T20:35:32.807940Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-21999", "record": "FKIE_CVE-2022-21999", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-30T02:17:48Z", "date_only": false, "value": "2025-01-30T02:17:48.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/aWPQ6S4atnyDD3dUH3K-x1BU3R5-n4OL9JH-9OFaA4Rgfst8", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "1efa2235-23b0-4737-b721-2a95f499d35c"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "3b68a024-8be9-4026-af40-2b7de0ffdf42"}, {"timestamp": "2025-02-23T02:10:34Z", "date_only": false, "value": "2025-02-23T02:10:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "308bc1b5-1b49-44bc-b3ef-ca940972d42f"}, {"timestamp": "2025-02-23T04:10:43Z", "date_only": false, "value": "2025-02-23T04:10:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "45da05b3-98db-4419-8849-d23b3cb9f0fb"}, {"timestamp": "2025-10-21T23:15:47.961Z", "date_only": false, "value": "2025-10-21T23:15:47.961Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-21999", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:47.961Z", "date_only": false, "value": "2025-10-21T23:15:47.961Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-21999", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:28Z", "date_only": false, "value": "2025-10-22T00:32:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9CR3-63PG-942X", "record": "GHSA-9CR3-63PG-942X", "field": "modified"}, {"timestamp": "2026-02-02T12:27:58.841Z", "date_only": false, "value": "2026-02-02T12:27:58.841823Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/54c7f9b1-8660-4360-82f7-8a9d0f201afa", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "a13d1a45-f832-49a5-a4b4-7513aa2158e3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/54c7f9b1-8660-4360-82f7-8a9d0f201afa"}, {"timestamp": "2026-02-02T12:27:58.841Z", "date_only": false, "value": "2026-02-02T12:27:58.841823Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/54c7f9b1-8660-4360-82f7-8a9d0f201afa", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "5edaf75d-11b2-46ec-8bfb-0384585ea167", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/54c7f9b1-8660-4360-82f7-8a9d0f201afa"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-21999", "field": "timestamps.recorded_at", "uuid": "b1a40c16-b0fe-48a0-a21a-e6e3c3a78a87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T04:27:26.760Z", "date_only": false, "value": "2026-06-17T04:27:26.760", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-21999", "record": "FKIE_CVE-2022-21999", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:25.629Z", "date_only": false, "value": "2026-06-19T12:47:25.629864Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/855c61af-a022-44b3-a21f-d37012422388", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "1794ed89-c366-4d9c-9ed6-e7337bd6e9a6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/855c61af-a022-44b3-a21f-d37012422388"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-21999", "field": "timestamps.recorded_at", "uuid": "9d268cc5-5eea-428f-a10e-f54e971e3ae0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:44.741Z", "date_only": false, "value": "2026-06-23T11:13:44.741128Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9d268cc5-5eea-428f-a10e-f54e971e3ae0", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "3b0a3d20-a4af-430d-a8c9-bec4c84b6789", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9d268cc5-5eea-428f-a10e-f54e971e3ae0"}, {"timestamp": "2026-06-23T14:05:13.561Z", "date_only": false, "value": "2026-06-23T14:05:13.561439Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2ba59c12-309e-417d-a13a-0e7facc5e3bf", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "8b2b7793-431b-4175-ae64-79c541e42538", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2ba59c12-309e-417d-a13a-0e7facc5e3bf"}, {"timestamp": "2026-07-26T07:01:45.012Z", "date_only": false, "value": "2026-07-26T07:01:45.012122Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/1269", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "d17b4c3c-13ea-4d9e-9361-ba67bcf8cac5", "url": "https://t.me/Positive_Technologies/1269"}, {"timestamp": "2026-07-27T00:01:29.831Z", "date_only": false, "value": "2026-07-27T00:01:29.831381Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/1269", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "176eded3-5354-4fd9-9144-29d53a63045f", "url": "https://t.me/Positive_Technologies/1269"}, {"timestamp": "2026-07-28T20:00:08.978Z", "date_only": false, "value": "2026-07-28T20:00:08.978395Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/1269", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "d10ab70f-9968-4200-b80f-9841dce038f6", "url": "https://t.me/Positive_Technologies/1269"}, {"timestamp": "2026-07-29T00:00:27.643Z", "date_only": false, "value": "2026-07-29T00:00:27.643676Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/1269", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "05063bcf-4be7-4780-ae91-7829317ef5d3", "url": "https://t.me/Positive_Technologies/1269"}, {"timestamp": "2026-07-29T12:02:45.997Z", "date_only": false, "value": "2026-07-29T12:02:45.997394Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2096", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "e9ed2f0d-2914-497a-a1b4-44fb7ca6a04c", "url": "https://t.me/reverseame/2096"}, {"timestamp": "2026-07-30T00:02:39.497Z", "date_only": false, "value": "2026-07-30T00:02:39.497055Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2096", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "f8838b70-47e4-4581-b818-8bb076953810", "url": "https://t.me/reverseame/2096"}, {"timestamp": "2026-08-03T02:09:14.093Z", "date_only": false, "value": "2026-08-03T02:09:14.093165Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2096", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "17e62ca1-4412-4c26-8606-d65ff9625ad4", "url": "https://t.me/reverseame/2096"}, {"timestamp": "2026-08-04T00:00:53.212Z", "date_only": false, "value": "2026-08-04T00:00:53.212220Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2096", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "53948de9-96a3-4dc2-aa82-6a1e9af59a99", "url": "https://t.me/reverseame/2096"}, {"timestamp": "2026-08-09T04:33:49.325Z", "date_only": false, "value": "2026-08-09T04:33:49.325214Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/2121", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "03fb2885-6fc9-4efd-bc0e-4a9fe2bd01d4", "url": "https://t.me/onelab1337/2121"}, {"timestamp": "2026-08-10T00:00:26.718Z", "date_only": false, "value": "2026-08-10T00:00:26.718453Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/2121", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "935f0cd5-b337-48d2-b2d0-5af7af34dd6c", "url": "https://t.me/onelab1337/2121"}, {"timestamp": "2026-09-01T20:01:54.447Z", "date_only": false, "value": "2026-09-01T20:01:54.447186Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/43066", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "31b1c2a1-6ddd-4aae-8540-714a1b36396a", "url": "https://t.me/hacking_Attack/43066"}, {"timestamp": "2026-09-01T20:01:54.774Z", "date_only": false, "value": "2026-09-01T20:01:54.774476Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/43056", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "1c8beb38-445b-42a1-9926-dfc35886e6fb", "url": "https://t.me/hacking_Attack/43056"}, {"timestamp": "2026-09-06T08:00:07.304Z", "date_only": false, "value": "2026-09-06T08:00:07.304388Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/43056", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "a00537d0-0a72-4ef7-978a-8d5650f1b3e3", "url": "https://t.me/hacking_Attack/43056"}, {"timestamp": "2026-09-06T08:00:07.498Z", "date_only": false, "value": "2026-09-06T08:00:07.498219Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/43066", "record": "CVE-2022-21999", "field": "creation_timestamp", "uuid": "d78c0610-639d-4f40-9ec5-eae222aa8bd7", "url": "https://t.me/hacking_Attack/43066"}]}