Lucene search
MicrosoftMS:CVE-2021-40466HistoryOct 12, 2021 - 7:00 a.m.
Windows Common Log File System Driver Elevation of Privilege Vulnerability
2021-10-1207:00:00
Microsoft
msrc.microsoft.com
25
windows
log file system
driver
elevation
privilege
vulnerability
microsoft
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.6
Confidence
High
EPSS
0
Percentile
9.5%
Affected configurations
Node
microsoftwindows_server_2012Range<6.3.9600.20144r2
ORmicrosoftwindows_server_2012Range<6.3.9600.20144r2
ORmicrosoftwindows_server_2012Range<6.3.9600.20144r2
ORmicrosoftwindows_server_2012Range<6.3.9600.20144r2
ORmicrosoftwindows_server_2012Range<6.2.9200.23490
ORmicrosoftwindows_server_2012Range<6.2.9200.23490
ORmicrosoftwindows_server_2012Range<6.2.9200.23490
ORmicrosoftwindows_server_2012Range<6.2.9200.23490
ORmicrosoftwindows_server_2008Range<6.1.7601.25740r2
ORmicrosoftwindows_server_2008Range<6.1.7601.25740r2
ORmicrosoftwindows_server_2008Range<6.1.7601.25740r2
ORmicrosoftwindows_server_2008Range<6.1.7601.25740r2
ORmicrosoftwindows_server_2008Range<6.0.6003.21251sp2
ORmicrosoftwindows_server_2008Range<6.0.6003.21251sp2
ORmicrosoftwindows_server_2008Range<6.0.6003.21251sp2
ORmicrosoftwindows_server_2008Range<6.0.6003.21251sp2
ORmicrosoftwindows_server_2008Range<6.0.6003.21251sp2
ORmicrosoftwindows_server_2008Range<6.0.6003.21251sp2
ORmicrosoftwindows_server_2008Range<6.0.6003.21251sp2
ORmicrosoftwindows_server_2008Range<6.0.6003.21251sp2
ORmicrosoftwindows_rt_8.1Range<6.3.9600.20144
ORmicrosoftwindows_8.1Range<6.3.9600.20144
ORmicrosoftwindows_8.1Range<6.3.9600.20144
ORmicrosoftwindows_8.1Range<6.3.9600.20144
ORmicrosoftwindows_8.1Range<6.3.9600.20144
ORmicrosoftwindows_7Range<6.1.7601.25740
ORmicrosoftwindows_7Range<6.1.7601.25740
ORmicrosoftwindows_7Range<6.1.7601.25740
ORmicrosoftwindows_7Range<6.1.7601.25740
ORmicrosoftwindows_server_2016Range<10.0.14393.4704
ORmicrosoftwindows_server_2016Range<10.0.14393.4704
ORmicrosoftwindows_10_1607Range<10.0.14393.4704
ORmicrosoftwindows_10_1607Range<10.0.14393.4704
ORmicrosoftwindows_10_1507Range<10.0.10240.19086
ORmicrosoftwindows_10_1507Range<10.0.10240.19086
ORmicrosoftwindows_11_21h2Range<10.0.22000.258
ORmicrosoftwindows_11_21h2Range<10.0.22000.258
ORmicrosoftwindows_server_20h2Range<10.0.19042.1288
ORmicrosoftwindows_10_20h2Range<10.0.19042.1288
ORmicrosoftwindows_10_20h2Range<10.0.19042.1288
ORmicrosoftwindows_server_2004Range<10.0.19041.1288
ORmicrosoftwindows_10_1809Range<10.0.19041.1288
ORmicrosoftwindows_10_1809Range<10.0.19041.1288
ORmicrosoftwindows_10_1809Range<10.0.19041.1288
ORmicrosoftwindows_server_2022Range<10.0.20348.288
ORmicrosoftwindows_server_2022Range<10.0.20348.288
ORmicrosoftwindows_10_21h1Range<10.0.19043.1288
ORmicrosoftwindows_10_21h1Range<10.0.19043.1288
ORmicrosoftwindows_10_21h1Range<10.0.19043.1288
ORmicrosoftwindows_10_1809Range<10.0.18363.1854
ORmicrosoftwindows_10_1909Range<10.0.18363.1854
ORmicrosoftwindows_10_1909Range<10.0.18363.1854
ORmicrosoftwindows_server_2019Range<10.0.17763.2237
ORmicrosoftwindows_server_2019Range<10.0.17763.2237
ORmicrosoftwindows_10_1809Range<10.0.17763.2237
ORmicrosoftwindows_10_1809Range<10.0.17763.2237
ORmicrosoftwindows_10_1809Range<10.0.17763.2237
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_server_2012 | * | cpe:2.3:o:microsoft:windows_server_2012:*:r2:*:*:*:*:*:* |
| microsoft | windows_server_2012 | * | cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:r2:*:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:* |
| microsoft | windows_rt_8.1 | * | cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:* |
| microsoft | windows_8.1 | * | cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:* |
| microsoft | windows_7 | * | cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:* |
| microsoft | windows_server_2016 | * | cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* |
| microsoft | windows_10_1607 | * | cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:* |
| microsoft | windows_10_1507 | * | cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
prion
prion
Privilege escalation
2021-10-13 01:15:00
nvd
nvd
CVE-2021-40466
2021-10-13 01:15:10
cve
cve
CVE-2021-40466
2021-10-13 01:15:10
cvelist
cvelist
checkpoint_advisories
checkpoint_advisories
mskb
mskb
October 12, 2021âKB5006715 (Security-only update)
2021-10-12 07:00:00
October 12, 2021âKB5006728 (Security-only update)
2021-10-12 07:00:00
October 12, 2021âKB5006736 (Monthly Rollup)
2021-10-12 07:00:00
nessus
nessus
KB5006715: Windows Server 2008 Security Update (October 2021)
2021-10-12 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5006743)
2021-10-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5006714)
2021-10-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5006675)
2021-10-13 00:00:00
kaspersky
kaspersky
KLA12309 Multiple vulnerabilities in Microsoft Products (ESU)
2021-10-12 00:00:00
KLA12310 Multiple vulnerabilities in Microsoft Windows
2021-10-12 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - October 2021
2021-10-12 19:47:16
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.6
Confidence
High
EPSS
0
Percentile
9.5%
Related for MS:CVE-2021-40466