CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2021-319555.5/MEDIUMEPSS 81.1%CISA KEV
2021-06-08

Windows Kernel Information Disclosure Vulnerability (CVE-2021-31955) Analysis and Mitigation Guide

[Affected Scope] Multiple Windows operating system versions including Windows 10, Windows 11, and Windows Server 2016/2019/2022

[Impact] Local attackers can retrieve sensitive kernel memory addresses, bypassing Kernel Address Space Layout Randomization (KASLR) to facilitate subsequent Local Privilege Escalation (LPE) attacks

[Mitigation] Apply the official Microsoft Latest Cumulative Update (LCU) to patch the kernel information disclosure flaw

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse