What is CVE-2021-41336?

CVE-2021-41336 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Windows Kernel Information Disclosure Vulnerability

Which CVE IDs does CVE-2021-41336 cover?

CVE-2021-41336 covers the following CVE IDs: CVE-2021-41336. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-41336?

CVE-2021-41336 has a CVSS v3 base score of 5.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-41336?

CVE-2021-41336 affects 4 products, including: Windows 11 version 21H2 for ARM64-based Systems; Windows 11 version 21H2 for x64-based Systems; Windows Server 2022; Windows Server 2022 (Server Core installation).

CVE-2021-41336HighCVSS 5.5

Windows Kernel Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

October 12, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-41336 →

📋 Description

What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.

🎯 Affected products4

Windows 11 version 21H2 for ARM64-based Systems
Windows 11 version 21H2 for x64-based Systems
Windows Server 2022
Windows Server 2022 (Server Core installation)

✅ Remediation

KB5006699 (Security Update) — fixed build 10.0.20348.288 KB5006674 (Security Update) — fixed build 10.0.22000.258

🔗 References (3)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-41336
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674