CVE-2021-31958HighCVSS 7.5

Windows NTLM Elevation of Privilege Vulnerability

Published
June 8, 2021
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2021-31958 →

📋 Description

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? This vulnerability requires that a user with an affected version of Windows access a malicious server. An attacker would have to host a specially crafted server share or website. An attacker would have no way to force users to visit this specially crafted server share or website, but would have to convince them to visit the server share or website, typically by way of an enticement in an email or chat message.

🎯 Affected products39

  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 10 Version 1809 for ARM64-based Systems
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1909 for 32-bit Systems
  • Windows 10 Version 1909 for ARM64-based Systems
  • Windows 10 Version 1909 for x64-based Systems
  • Windows 10 Version 2004 for 32-bit Systems
  • Windows 10 Version 2004 for ARM64-based Systems
  • Windows 10 Version 2004 for x64-based Systems
  • Windows 10 Version 20H2 for 32-bit Systems
  • Windows 10 Version 20H2 for ARM64-based Systems
  • Windows 10 Version 21H1 for 32-bit Systems
  • Windows 10 Version 21H1 for ARM64-based Systems
  • Windows 10 Version 21H1 for x64-based Systems
  • Windows 10 for 32-bit Systems
  • Windows 10 for x64-based Systems
  • Windows 7 for 32-bit Systems Service Pack 1
  • Windows 7 for x64-based Systems Service Pack 1
  • Windows 8.1 for 32-bit systems
  • Windows 8.1 for x64-based systems
  • Windows RT 8.1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
  • Windows Server 2008 for 32-bit Systems Service Pack 2
  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 for x64-based Systems Service Pack 2
  • Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
  • Windows Server 2012
  • +9 more not shown

✅ Remediation

KB5003646 (Security Update) — fixed build 10.0.17763.1999 KB5003635 (Security Update) — fixed build 10.0.18363.1621 KB5003637 (Security Update) — fixed build 10.0.19043.1052 KB5003637 (Security Update) — fixed build 10.0.19041.1052 KB5003637 (Security Update) — fixed build 10.0.19042.1052 KB5003687 (Security Update) — fixed build 10.0.10240.18967 KB5003638 (Security Update) — fixed build 10.0.14393.4467 KB5003667 (Monthly Rollup) — fixed build 6.1.7601.25632 KB5003694 (Security Only) — fixed build 6.1.7601.25632 KB5003671 (Monthly Rollup) — fixed build 6.3.9600.20045 KB5003681 (Security Only) — fixed build 6.3.9600.20044 KB5003661 (Monthly Rollup) — fixed build 6.0.6003.21137 KB5003695 (Security Only) — fixed build 6.0.6003.21137 KB5003697 (Monthly Rollup) — fixed build 6.2.9200.23372 KB5003696 (Security Only) — fixed build 6.2.9200.23372

🔗 References (25)