CVE-2021-26417HighCVSS 5.5
Windows Overlay Filter Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.
🎯 Affected products17
- Windows 10 Version 1809 for 32-bit Systems
- Windows 10 Version 1809 for ARM64-based Systems
- Windows 10 Version 1809 for x64-based Systems
- Windows 10 Version 1909 for 32-bit Systems
- Windows 10 Version 1909 for ARM64-based Systems
- Windows 10 Version 1909 for x64-based Systems
- Windows 10 Version 2004 for 32-bit Systems
- Windows 10 Version 2004 for ARM64-based Systems
- Windows 10 Version 2004 for x64-based Systems
- Windows 10 Version 20H2 for 32-bit Systems
- Windows 10 Version 20H2 for ARM64-based Systems
- Windows 10 Version 20H2 for x64-based Systems
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server, version 1909 (Server Core installation)
- Windows Server, version 2004 (Server Core installation)
- Windows Server, version 20H2 (Server Core Installation)
✅ Remediation
KB5001342 (Security Update) KB5001337 (Security Update) KB5001330 (Security Update)
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26417
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5001342
- referencehttps://support.microsoft.com/help/5001342
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5001337
- referencehttps://support.microsoft.com/help/5001337
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5001330
- referencehttps://support.microsoft.com/help/5001330