CVE-2021-26432

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

CVSS 3.1 · 9.8 Critical EPSS 11.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 12 more

CVE-2021-26431

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 20h2 and 4 more

CVE-2021-34535

Remote Desktop Client Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 21.9% KEV · Not listed

Vendors

Microsoft

Products

Remote Desktop Remote Desktop Client Windows 10 and 15 more

CVE-2021-34484

Windows User Profile Service Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 21.8% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 19 more

CVE-2021-34483

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

CVE-2021-34533

Windows Graphics Component Font Parsing Remote Code Execution Vulnerability

Windows Graphics Component Font Parsing Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

CVE-2021-34530

Windows Graphics Component Remote Code Execution Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 8 more

CVE-2021-36958

Windows Print Spooler Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

CVSS 3.1 · 7.8 High EPSS 30.8% KEV · Not listed

Vendors

Microsoft

Products

Windows Windows 10 1507 Windows 10 1607 and 14 more

CVE-2021-36948

Windows Update Medic Service Elevation of Privilege Vulnerability

Windows Update Medic Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 23.3% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1809 Windows 10 1909 Windows 10 2004 and 8 more

CVE-2021-36947

Windows Print Spooler Remote Code Execution Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 7.6% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

CVE-2021-36937

Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability

Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.3% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

CVE-2021-36936

Windows Print Spooler Remote Code Execution Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 7.5% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

CVE-2021-26426

Windows User Account Profile Picture Elevation of Privilege Vulnerability

Windows User Account Profile Picture Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 13 more

CVE-2021-26425

Windows Event Tracing Elevation of Privilege Vulnerability

Windows Event Tracing Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

CVE-2021-26424

Windows TCP/IP Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

CVSS 3.1 · 9.9 Critical EPSS 61.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

CVE-2021-34537

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Windows Bluetooth Driver Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 15 more

CVE-2021-34487

Windows Event Tracing Elevation of Privilege Vulnerability

Windows Event Tracing Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1607 Windows 10 1809 and 7 more

CVE-2021-34536

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 8 more

CVE-2021-34486

Windows Event Tracing Elevation of Privilege Vulnerability

Windows Event Tracing Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 9.3% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1809 Windows 10 1909 Windows 10 2004 and 8 more

CVE-2021-34534

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1 · 6.8 Medium EPSS 2.2% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 6 more