CVE-2021-26433

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

CVSS 3.1 · 7.5 High EPSS 3.6% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 12 more

CVE-2021-26432

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

CVSS 3.1 · 9.8 Critical EPSS 11.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 12 more

CVE-2021-26431

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 20h2 and 4 more

CVE-2021-34535

Remote Desktop Client Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 21.9% KEV · Not listed

Vendors

Microsoft

Products

Remote Desktop Remote Desktop Client Windows 10 and 15 more

CVE-2021-34484

Windows User Profile Service Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 21.8% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 19 more

CVE-2021-34483

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

CVE-2021-34533

Windows Graphics Component Font Parsing Remote Code Execution Vulnerability

Windows Graphics Component Font Parsing Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

CVE-2021-34530

Windows Graphics Component Remote Code Execution Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 8 more

CVE-2021-34471

Microsoft Defender Elevation of Privilege Vulnerability

Microsoft Defender Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Malware Protection Engine

CVE-2021-36958

Windows Print Spooler Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

CVSS 3.1 · 7.8 High EPSS 30.8% KEV · Not listed

Vendors

Microsoft

Products

Windows Windows 10 1507 Windows 10 1607 and 14 more

CVE-2021-36950

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1 · 5.4 Medium EPSS 1.0% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365

CVE-2021-36949

Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

CVSS 3.1 · 7.1 High EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Azure Active Directory Connect Azure Active Directory Connect Provisioning Agent

CVE-2021-36948

Windows Update Medic Service Elevation of Privilege Vulnerability

Windows Update Medic Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 23.3% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1809 Windows 10 1909 Windows 10 2004 and 8 more

CVE-2021-36947

Windows Print Spooler Remote Code Execution Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 7.6% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

CVE-2021-36946

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

CVSS 3.1 · 5.4 Medium EPSS 1.0% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365 Business Central Dynamics 365 Business Central 2019 Dynamics 365 Business Central 2020 and 3 more

CVE-2021-36945

Windows 10 Update Assistant Elevation of Privilege Vulnerability

Windows 10 Update Assistant Elevation of Privilege Vulnerability

CVSS 3.1 · 7.3 High EPSS 1.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Update Assistant

CVE-2021-36942

Windows LSA Spoofing Vulnerability

Windows LSA Spoofing Vulnerability

CVSS 3.1 · 7.5 High EPSS 66.0% KEV · Listed

Vendors

Microsoft

Products

Windows Server 2004 Windows Server 2008 Windows Server 2008 R2 and 7 more

CVE-2021-36941

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.2% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office 2019

CVE-2021-36940

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

CVSS 3.1 · 7.6 High EPSS 4.0% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Enterprise Server Sharepoint Server Sharepoint Server 2013 and 2 more

CVE-2021-36938

Windows Cryptographic Primitives Library Information Disclosure Vulnerability

Windows Cryptographic Primitives Library Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 3 more