CVE-2021-31979

Windows Kernel Elevation of Privilege Vulnerability

CVSS 7.8 HIGHEPSS 2.6%● KEVCWE-119

Vexday Risk Score

51Attention

SSVC decision (CISA)

Act

Exploitation + impact → act immediately

CVSS 7.8EPSS 2.6%KEV simPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 Jul 2021Published on NVD

03 Nov 2021Active exploitation (CISA KEV)

Recommendation: Patch as soon as possible — active exploitation confirmed.

In short

A flaw in the Windows Kernel allows an attacker with local access to run code with system-level privileges, potentially taking complete control of the computer. This is dangerous because it lets ordinary programs escalate to administrator rights without authorization.

Technical detail

A buffer overflow vulnerability (CWE-119) in the Windows Kernel permits local privilege escalation when a specially crafted request is processed. Requires prior local code execution; successful exploitation grants SYSTEM-level privileges, enabling full system compromise.

Summary generated and translated by AI from the official description.

Windows Kernel Elevation of Privilege Vulnerability

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31979 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-31979