CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2021-344867.8/HIGHEPSS 9.3%CISA KEV

2021-08-12

Windows Event Tracing (ETW) Elevation of Privilege Vulnerability (CVE-2021-34486) Technical Analysis and Mitigation Guide

[Affected Scope] Event Tracing for Windows (ETW) subsystem in Windows 10, Windows 11, and Windows Server families

[Impact] Local attackers can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with SYSTEM privileges, leading to full system compromise

[Mitigation] Immediately apply the official Microsoft Cumulative Update (LCU) and restrict local access on unpatched systems

cve-2021-34486 elevation-of-privilege uaf cwe-416 etw windows-event-tracing

Full Advisory & Mitigation