CVE-2021-26891

Windows Container Execution Agent Elevation of Privilege Vulnerability...

CVE-2021-26891 Windows Container Execution Agent Elevation of Privilege Vulnerability

...

CVE-2021-26891

CVE-2021-26891 is a Windows Container Execution Agent Elevation of Privilege vulnerability affecting Windows Server Containers. Project Zero analysis details multiple silo/registry/object-manager weaknesses that can be chained to escape a container from a non‑administrator. Core issues include: (...

Microsoft Windows Containers Privilege Escalation Vulnerability

The standard user ContainerUser in a Windows Container has elevated privileges and High integrity level which results in making it administrator equivalent even though it should be a restricted user. Windows Containers: ContainerUser has Elevated Privileges Windows Containers: ContainerUser has...

Microsoft Windows Containers Privilege Escalation

Windows Containers: ContainerUser has Elevated Privileges Windows Containers: ContainerUser has Elevated Privileges Platform: Windows 10 20H2 not tested other versions Class: Elevation of Privilege Security Boundary: User Summary: The standard user ContainerUser in a Windows Container has elevate...

KB5000822: Windows 10 Version 1809 and Windows Server 2019 March 2021 Security Update

The remote Windows host is missing security update 5000822. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-1729, CVE-2021-24095, CVE-2021-26860, CVE-2021-26862,...

KB5000808: Windows 10 Version 1909 March 2021 Security Update

The remote Windows host is missing security update 5000808. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-1729, CVE-2021-24090, CVE-2021-24095, CVE-2021-26860,...