CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability (CVE-2021-31201) Advisory
[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Enhanced Cryptographic Provider component
[Impact] A local attacker can bypass security boundaries to elevate privileges and gain unauthorized system-level access
[Mitigation] Apply the official Microsoft security updates immediately and restrict local execution privileges
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability (CVE-2021-31199) Analysis and Mitigation Guide
[Affected Scope] Systems running Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019, 2022 utilizing the Microsoft Enhanced Cryptographic Provider
[Impact] Local attackers can elevate privileges from a low-privileged account to SYSTEM level, leading to complete system compromise
[Mitigation] Immediately apply the official Microsoft security patches and restrict local access privileges on unpatched systems