CVE-2021-33771
Windows Kernel Elevation of Privilege Vulnerability
Vexday Risk Score
51Attention
SSVC decision (CISA)
Act
Exploitation + impact → act immediately
CVSS 7.8EPSS 6.2%KEV simPoC —Nuclei —Metasploit —Patch —
Lifecycle
14 Jul 2021Published on NVD
03 Nov 2021Active exploitation (CISA KEV)
Recommendation: Patch as soon as possible — active exploitation confirmed.
In short
A flaw in the Windows Kernel allows an attacker with local access to run malicious code with higher system privileges than they should have. This is dangerous because it can give an attacker complete control over your computer.
Technical detail
Local privilege escalation vulnerability in the Windows Kernel that allows an authenticated attacker to execute arbitrary code with elevated privileges. The vulnerability requires prior local access to the system; successful exploitation results in kernel-level code execution.
Summary generated and translated by AI from the official description.
Windows Kernel Elevation of Privilege Vulnerability
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Affected products
Microsoft · Windows 10 Version 1507Microsoft · Windows 10 Version 1607Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 1909Microsoft · Windows 10 Version 2004Microsoft · Windows 10 Version 20H2Microsoft · Windows 10 Version 21H1Microsoft · Windows 8.1Microsoft · Windows Server 2012 R2Microsoft · Windows Server 2012 R2 (Server Core installation)Microsoft · Windows Server 2016Microsoft · Windows Server 2016 (Server Core installation)Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server version 2004Microsoft · Windows Server version 20H2