High · published July 14, 2021
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 95.7th percentile for exploit probability.
⚠️ A sneaky privilege escalation flaw in the Windows Kernel is open for business, and it’s been exploited in the wild! Think of this vulnerability like a faulty elevator in a high-rise building that lets anyone access restricted floors without a keycard — it undermines the very security the building relies on. 🎢 An attacker could leverage this exploit to gain elevated privileges, taking control of system operations and accessing sensitive areas they shouldn't touch. This means they could install malware, steal personal data, or even cripple the system entirely—yikes!
Think of this vulnerability like a faulty elevator in a high-rise building that lets anyone access restricted floors without a keycard — it undermines the very security the building relies on. 🎢 This vulnerability exists due to improper validation of input in the Windows Kernel, allowing attackers to escalate their privileges and execute arbitrary code in the system context without proper authorization.
An attacker could leverage this exploit to gain elevated privileges, taking control of system operations and accessing sensitive areas they shouldn't touch. This means they could install malware, steal personal data, or even cripple the system entirely—yikes! Patch your systems immediately with the latest security updates from Microsoft to close this vulnerability. Regularly audit permissions and apply principle of least privilege to help minimize risks. 🛡️ You've got this! Patch up and keep your systems secure like the true security hero you are! 💪✨
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1507 | < 10.0.10240.19003 | 10.0.10240.19003 |
| microsoft/windows_10_1607 | < 10.0.14393.4530 | 10.0.14393.4530 |
| microsoft/windows_10_1809 | < 10.0.17763.2061 | 10.0.17763.2061 |
| microsoft/windows_10_1909 | < 10.0.18363.1679 | 10.0.18363.1679 |
| microsoft/windows_10_2004 | < 10.0.19041.1110 | 10.0.19041.1110 |
| microsoft/windows_10_20h2 | < 10.0.19042.1110 | 10.0.19042.1110 |
| microsoft/windows_10_21h1 | < 10.0.19043.1110 | 10.0.19043.1110 |
| microsoft/windows_8.1 | all versions | — |
| microsoft/windows_rt_8.1 | all versions | — |
| microsoft/windows_server_2004 | < 10.0.19041.1110 | 10.0.19041.1110 |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.4530 | 10.0.14393.4530 |
| microsoft/windows_server_2019 | < 10.0.17763.2061 | 10.0.17763.2061 |
| microsoft/windows_server_20h2 | < 10.0.19042.1110 | 10.0.19042.1110 |