Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2021-31201
HistoryJun 08, 2021 - 11:15 p.m.

CVE-2021-31201

2021-06-0823:15:00
NVD-CWE-noinfo
[email protected]
web.nvd.nist.gov
955
In Wild
8
cve-2021-31201
microsoft
enhanced cryptographic provider
elevation of privilege
vulnerability
nvd

5.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

6.7 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.1%

JSON

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

VendorProductVersionCPE
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_10_1909*cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:*:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*
microsoftwindows_10_2004*cpe:2.3:o:microsoft:windows_10_2004:*:*:*:*:*:*:*:*
microsoftwindows_server_version_2004*cpe:2.3:o:microsoft:windows_server_version_2004:*:*:*:*:*:*:*:*
microsoftwindows_10_20h2*cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*
microsoftwindows_server_20h2*cpe:2.3:o:microsoft:windows_server_20h2:*:*:*:*:*:*:*:*
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 281

Social References

More

Related

cisa_kev 1
prion 1
checkpoint_advisories 1
attackerkb 1
mscve 2
thn 2
mmpc 1
mssecure 1
krebs 1
mskb 13
threatpost 1
nessus 9
openvas 7
malwarebytes 1
avleonov 1
kaspersky 2
securelist 1
rapid7blog 1
qualysblog 3
googleprojectzero 1
cisa_kev
cisa_kev
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
2021-11-03 00:00:00
prion
prion
Privilege escalation
2021-06-08 23:15:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows dssenh.dll Elevation of Privilege (CVE-2021-31201)
2021-06-08 00:00:00
attackerkb
attackerkb
CVE-2021-31201
2021-06-08 00:00:00
mscve
mscve
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
thn
thn
Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits
2022-07-28 11:18:00
Update Your Windows Computers to Patch 6 New In-the-Wild Zero-Day Bugs
2021-06-09 06:07:00
mmpc
mmpc
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
mssecure
mssecure
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
krebs
krebs
Microsoft Patches Six Zero-Day Security Holes
2021-06-08 20:53:28
mskb
mskb
June 8, 2021—KB5003695 (Security-only update)
2021-06-08 07:00:00
June 8, 2021—KB5003694 (Security-only update)
2021-06-08 07:00:00
June 8, 2021—KB5003661 (Monthly Rollup)
2021-06-08 07:00:00
threatpost
threatpost
Microsoft Patch Tuesday Fixes 6 In-The-Wild Exploits
2021-06-08 21:45:12
nessus
nessus
KB5003695: Windows Server 2008 Security Update (June 2021)
2021-06-08 00:00:00
KB5003694: Windows 7 and Windows Server 2008 R2 Security Update (June 2021)
2021-06-08 00:00:00
KB5003681: Windows 8.1 and Windows Server 2012 R2 Security Update (June 2021)
2021-06-08 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5003667)
2021-06-09 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5003687)
2021-06-10 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5003671)
2021-06-09 00:00:00
malwarebytes
malwarebytes
Microsoft fixes seven zero-days, including two PuzzleMaker targets, Google fixes serious Android flaw
2021-06-09 14:50:52
avleonov
avleonov
Vulristics: Microsoft Patch Tuesdays Q2 2021
2021-07-10 00:14:59
kaspersky
kaspersky
KLA12198 Multiple vulnerabilities in Microsoft Products (ESU)
2021-06-08 00:00:00
KLA12202 Multiple vulnerabilities in Microsoft Windows
2021-06-08 00:00:00
securelist
securelist
IT threat evolution in Q2 2021. PC statistics
2021-08-12 10:00:12
rapid7blog
rapid7blog
Patch Tuesday - June 2021
2021-06-08 10:00:00
qualysblog
qualysblog
Microsoft & Adobe Patch Tuesday (June 2021) – Microsoft 50 Vulnerabilities with 5 Critical, Adobe 21 Critical Vulnerabilities
2021-06-08 21:19:29
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
googleprojectzero
googleprojectzero
The More You Know, The More You Know You Don’t Know
2022-04-19 00:00:00

5.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

6.7 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.1%

JSON
Related for CVE-2021-31201
cisa_kev1prion1checkpoint_advisories1attackerkb1mscve2thn2mmpc1mssecure1krebs1mskb13threatpost1nessus9openvas7malwarebytes1avleonov1kaspersky2securelist1rapid7blog1qualysblog3googleprojectzero1