Windows Recovery Environment Agent Elevation of Privilege Vulnerability

🔗 CVE IDs covered (1)

🎯 Affected products17

• Windows 10 Version 2004 for 32-bit Systems
• Windows 10 Version 2004 for ARM64-based Systems
• Windows 10 Version 2004 for x64-based Systems
• Windows 10 Version 20H2 for 32-bit Systems
• Windows 10 Version 20H2 for ARM64-based Systems
• Windows 10 Version 21H1 for 32-bit Systems
• Windows 10 Version 21H1 for ARM64-based Systems
• Windows 10 Version 21H1 for x64-based Systems
• Windows 10 Version 21H2 for 32-bit Systems
• Windows 10 Version 21H2 for ARM64-based Systems
• Windows 10 Version 21H2 for x64-based Systems
• Windows 11 version 21H2 for ARM64-based Systems
• Windows 11 version 21H2 for x64-based Systems
• Windows Server 2022
• Windows Server 2022 (Server Core installation)
• Windows Server, version 2004 (Server Core installation)
• Windows Server, version 20H2 (Server Core Installation)

✅ Remediation

KB5008212 (Security Update) — fixed build 10.0.19043.1415 KB5008223 (Security Update) — fixed build 10.0.20348.405 KB5008212 (Security Update) — fixed build 10.0.19041.1415 KB5008212 (Security Update) — fixed build 10.0.19042.1415 KB5008215 (Security Update) — fixed build 10.0.22000.376 KB5008212 (Security Update) — fixed build 10.0.19044.1415

🔗 References (6)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43239
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5008212
• referencehttps://support.microsoft.com/help/5008212
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5008223
• referencehttps://support.microsoft.com/help/5008223
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5008215