CVE-2021-42291

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1 · 7.5 High EPSS 4.2% KEV · Not listed

Vendors

Microsoft

Products

Windows Server Windows Server 2004 Windows Server 2008 and 8 more

CVE-2021-42288

Windows Hello Security Feature Bypass Vulnerability

Windows Hello Security Feature Bypass Vulnerability

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 1909 and 6 more

CVE-2021-42286

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 20h2 and 5 more

CVE-2021-42285

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2021-42284

Windows Hyper-V Denial of Service Vulnerability

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1 · 6.8 Medium EPSS 3.8% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 14 more

CVE-2021-42283

NTFS Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 20 more

CVE-2021-42282

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1 · 7.5 High EPSS 4.2% KEV · Not listed

Vendors

Microsoft

Products

Windows Server Windows Server 2004 Windows Server 2008 and 8 more

CVE-2021-42277

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Visual Studio 2015 Visual Studio 2017 and 15 more

CVE-2021-41376

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

CVSS 3.1 · 2.3 Low EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Sphere

CVE-2021-41375

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Sphere

CVE-2021-41374

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Sphere

CVE-2021-41373

FSLogix Information Disclosure Vulnerability

FSLogix Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Fslogix

CVE-2021-41370

NTFS Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2021-41349

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 93.5% KEV · Not listed

Vendors

Microsoft

Products

Exchange Server

CVE-2023-21717

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server

CVE-2021-41351

Microsoft Edge (Chrome based) Spoofing on IE Mode

Microsoft Edge (Chrome based) Spoofing on IE Mode

CVSS 3.1 · 4.3 Medium EPSS 3.9% KEV · Not listed

Vendors

Microsoft

Products

Edge Windows 10 Windows 11 and 1 more

CVE-2023-21716

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

CVSS 3.1 · 9.8 Critical EPSS 84.8% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel and 7 more

CVE-2021-38631

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

CVSS 3.1 · 4.4 Medium EPSS 1.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2021-40442

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.3% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Excel Excel 2013 and 11 more

CVE-2021-38666

Remote Desktop Client Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 15.2% KEV · Not listed

Vendors

Microsoft

Products

Remote Desktop Windows 10 Windows 10 1507 and 20 more