Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-31199
HistoryJun 08, 2021 - 11:15 p.m.

CVE-2021-31199

2021-06-0823:15:08
[email protected]
web.nvd.nist.gov
9
microsoft
cryptographic provider
elevation of privilege
vulnerability
cve-2021-31199

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

5.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

EPSS

0.005

Percentile

77.5%

JSON

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

Affected configurations

Nvd
Node
microsoftwindows_10_1507Range<10.0.10240.18967
OR
microsoftwindows_10_1607Range<10.0.14393.4467
OR
microsoftwindows_10_1809Range<10.0.17763.1999
OR
microsoftwindows_10_1909Range<10.0.18363.1621
OR
microsoftwindows_10_2004Range<10.0.19041.1052
OR
microsoftwindows_10_20h2Range<10.0.19042.1052
OR
microsoftwindows_10_21h1Range<10.0.19043.1052
OR
microsoftwindows_7Match-sp1
OR
microsoftwindows_8.1Match-
OR
microsoftwindows_rt_8.1Match-
OR
microsoftwindows_server_2004Range<10.0.19041.1052
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_server_2016Range<10.0.14393.4467
OR
microsoftwindows_server_2019Range<10.0.17763.1999
OR
microsoftwindows_server_20h2Range<10.0.19042.1052

Related

checkpoint_advisories 1
prion 1
cve 1
cvelist 1
cisa_kev 1
attackerkb 1
mscve 2
thn 2
mmpc 1
mssecure 1
mskb 13
krebs 1
threatpost 1
nessus 9
malwarebytes 1
openvas 7
avleonov 1
kaspersky 2
securelist 1
rapid7blog 1
qualysblog 3
googleprojectzero 1
checkpoint_advisories
checkpoint_advisories
Microsoft Windows rsaenh.dll Elevation of Privilege (CVE-2021-31199)
2021-06-08 00:00:00
prion
prion
Privilege escalation
2021-06-08 23:15:00
cve
cve
CVE-2021-31199
2021-06-08 23:15:08
cvelist
cvelist
CVE-2021-31199 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 22:46:13
cisa_kev
cisa_kev
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
2021-11-03 00:00:00
attackerkb
attackerkb
CVE-2021-31199
2021-06-08 00:00:00
mscve
mscve
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
thn
thn
Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits
2022-07-28 11:18:00
Update Your Windows Computers to Patch 6 New In-the-Wild Zero-Day Bugs
2021-06-09 06:07:00
mmpc
mmpc
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
mssecure
mssecure
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
mskb
mskb
June 8, 2021—KB5003695 (Security-only update)
2021-06-08 07:00:00
June 8, 2021—KB5003694 (Security-only update)
2021-06-08 07:00:00
June 8, 2021—KB5003661 (Monthly Rollup)
2021-06-08 07:00:00
krebs
krebs
Microsoft Patches Six Zero-Day Security Holes
2021-06-08 20:53:28
threatpost
threatpost
Microsoft Patch Tuesday Fixes 6 In-The-Wild Exploits
2021-06-08 21:45:12
nessus
nessus
KB5003695: Windows Server 2008 Security Update (June 2021)
2021-06-08 00:00:00
KB5003694: Windows 7 and Windows Server 2008 R2 Security Update (June 2021)
2021-06-08 00:00:00
KB5003697: Windows Server 2012 Security Update (June 2021)
2021-06-08 00:00:00
malwarebytes
malwarebytes
Microsoft fixes seven zero-days, including two PuzzleMaker targets, Google fixes serious Android flaw
2021-06-09 14:50:52
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5003667)
2021-06-09 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5003671)
2021-06-09 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5003687)
2021-06-10 00:00:00
avleonov
avleonov
Vulristics: Microsoft Patch Tuesdays Q2 2021
2021-07-10 00:14:59
kaspersky
kaspersky
KLA12198 Multiple vulnerabilities in Microsoft Products (ESU)
2021-06-08 00:00:00
KLA12202 Multiple vulnerabilities in Microsoft Windows
2021-06-08 00:00:00
securelist
securelist
IT threat evolution in Q2 2021. PC statistics
2021-08-12 10:00:12
rapid7blog
rapid7blog
Patch Tuesday - June 2021
2021-06-08 10:00:00
qualysblog
qualysblog
Microsoft & Adobe Patch Tuesday (June 2021) – Microsoft 50 Vulnerabilities with 5 Critical, Adobe 21 Critical Vulnerabilities
2021-06-08 21:19:29
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
googleprojectzero
googleprojectzero
The More You Know, The More You Know You Don’t Know
2022-04-19 00:00:00

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

5.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

EPSS

0.005

Percentile

77.5%

JSON
Related for NVD:CVE-2021-31199
checkpoint_advisories1prion1cve1cvelist1cisa_kev1attackerkb1mscve2thn2mmpc1mssecure1mskb13krebs1threatpost1nessus9malwarebytes1openvas7avleonov1kaspersky2securelist1rapid7blog1qualysblog3googleprojectzero1