CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2021-311995.2/MEDIUMEPSS 3.0%CISA KEV
2021-06-08

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability (CVE-2021-31199) Analysis and Mitigation Guide

[Affected Scope] Systems running Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019, 2022 utilizing the Microsoft Enhanced Cryptographic Provider

[Impact] Local attackers can elevate privileges from a low-privileged account to SYSTEM level, leading to complete system compromise

[Mitigation] Immediately apply the official Microsoft security patches and restrict local access privileges on unpatched systems

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse