CVE-2021-27070

Windows 10 Update Assistant Elevation of Privilege Vulnerability

Windows 10 Update Assistant Elevation of Privilege Vulnerability

CVSS 3.1 · 7.3 High EPSS 4.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 20h2 and 3 more

CVE-2021-24095

DirectX Elevation of Privilege Vulnerability

DirectX Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 1909 and 6 more

CVE-2021-1729

Windows Update Stack Setup Elevation of Privilege Vulnerability

Windows Update Stack Setup Elevation of Privilege Vulnerability

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 1909 and 6 more

CVE-2021-42278

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1 · 7.5 High EPSS 73.3% KEV · Listed

Vendors

Microsoft

Products

Windows Server 2004 Windows Server 2008 Windows Server 2008 R2 and 8 more

CVE-2021-41356

Windows Denial of Service Vulnerability

Windows Denial of Service Vulnerability

CVSS 3.1 · 7.5 High EPSS 3.0% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 11 more

CVE-2021-42291

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1 · 7.5 High EPSS 4.2% KEV · Not listed

Vendors

Microsoft

Products

Windows Server Windows Server 2004 Windows Server 2008 and 8 more

CVE-2021-42288

Windows Hello Security Feature Bypass Vulnerability

Windows Hello Security Feature Bypass Vulnerability

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 1909 and 6 more

CVE-2021-42286

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 20h2 and 5 more

CVE-2021-42285

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2021-42284

Windows Hyper-V Denial of Service Vulnerability

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1 · 6.8 Medium EPSS 3.8% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 14 more

CVE-2021-42283

NTFS Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 20 more

CVE-2021-42282

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1 · 7.5 High EPSS 4.2% KEV · Not listed

Vendors

Microsoft

Products

Windows Server Windows Server 2004 Windows Server 2008 and 8 more

CVE-2021-42277

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Visual Studio 2015 Visual Studio 2017 and 15 more

CVE-2021-41370

NTFS Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2021-41351

Microsoft Edge (Chrome based) Spoofing on IE Mode

Microsoft Edge (Chrome based) Spoofing on IE Mode

CVSS 3.1 · 4.3 Medium EPSS 3.9% KEV · Not listed

Vendors

Microsoft

Products

Edge Windows 10 Windows 11 and 1 more

CVE-2021-38631

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

CVSS 3.1 · 4.4 Medium EPSS 1.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2021-38666

Remote Desktop Client Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 15.2% KEV · Not listed

Vendors

Microsoft

Products

Remote Desktop Windows 10 Windows 10 1507 and 20 more

CVE-2021-38665

Remote Desktop Protocol Client Information Disclosure Vulnerability

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVSS 3.1 · 7.4 High EPSS 7.0% KEV · Not listed

Vendors

Microsoft

Products

Remote Desktop Remote Desktop Client Windows 10 and 18 more

CVE-2021-42280

Windows Feedback Hub Elevation of Privilege Vulnerability

Windows Feedback Hub Elevation of Privilege Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1607 Windows 10 1809 and 10 more

CVE-2021-42279

Chakra Scripting Engine Memory Corruption Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

CVSS 3.1 · 4.2 Medium EPSS 2.3% KEV · Not listed

Vendors

Microsoft

Products

Chakracore Windows 10 Windows 10 1507 and 11 more