Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Windows Kernel Elevation of Privilege Vulnerability
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2021-11-17. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 16 products
En julio de 2021, Microsoft lanzó parches para dos vulnerabilidades que Candiru explotaba (CVE-2021-31979 y CVE-2021-33771). No fue un comunicado de prensa: fueron actualizaciones de seguridad. Esa fue la forma elegida para revelar la investigación.
Post summary
Microsoft released July 2021 security updates for CVE‑2021‑31979 and CVE‑2021‑33771 to counter exploitation by Candiru.
18 of 18 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1507 | - | - | - |
| OS | microsoft | windows_10_1607 | - | - | - |
| OS | microsoft | windows_10_1809 | - | - | - |
| OS | microsoft | windows_10_1909 | - | - | - |
| OS | microsoft | windows_10_2004 | - | - | - |
| OS | microsoft | windows_10_20h2 | - | - | - |
| OS | microsoft | windows_10_21h1 | - | - | - |
| OS | microsoft | windows_7 | - | - | - |
| OS | microsoft | windows_8.1 | - | - | - |
| OS | microsoft | windows_rt_8.1 | - | - | - |
| OS | microsoft | windows_server_2004 | - | - | - |
| OS | microsoft | windows_server_2008 | - | - | - |
| OS | microsoft | windows_server_2008 | r2 | - | x64 |
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | - |
| OS | microsoft | windows_server_2019 | - | - | - |
| OS | microsoft | windows_server_20h2 | - | - | - |