CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2021-337398.4/HIGHEPSS 6.6%CISA KEV
2021-06-08

Microsoft Windows DWM Core Library Elevation of Privilege Vulnerability (CVE-2021-33739) Analysis and Mitigation Guide

[Affected Scope] Microsoft Windows operating systems utilizing the Desktop Window Manager (DWM), including Windows 10 and Windows Server 2016/2019/2022

[Impact] A local attacker can execute a specially crafted application to elevate privileges to SYSTEM, gaining full control over the compromised host

[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and restrict local execution privileges on unpatched systems

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse