CVE-2021-41335 - Windows Kernel Elevation of Privilege Vulnerability

Back Back to CVE browser

HIGH

Windows Kernel Elevation of Privilege Vulnerability

Published Oct 13, 2021

7.8

HIGH

CVSS 3.1

EPSS 1.37%

Description

Windows Kernel Elevation of Privilege Vulnerability

Affected products

Vendor Microsoft Product Windows 10 Version 1507 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.10240.19086
Vendor Microsoft Product Windows 10 Version 1607 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.14393.4704
Vendor Microsoft Product Windows 10 Version 1809 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.17763.2237
Vendor Microsoft Product Windows 10 Version 1909 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.18363.1854
Vendor Microsoft Product Windows 10 Version 2004 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.19041.1288
Vendor Microsoft Product Windows 10 Version 20H2 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.19042.1288
Vendor Microsoft Product Windows 10 Version 21H1 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.19043.1288
Vendor Microsoft Product Windows 7 Default
unknown
Affected
- ≥ 6.1.0, < 6.1.7601.25740
Vendor Microsoft Product Windows 7 Service Pack 1 Default
unknown
Affected
- ≥ 6.1.0, < 6.1.7601.25740
Vendor Microsoft Product Windows 8.1 Default
unknown
Affected
- ≥ 6.3.0, < 6.3.9600.20144
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 Default
unknown
Affected
- ≥ 6.1.0, < 6.1.7601.25740
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 (Server Core installation) Default
unknown
Affected
- ≥ 6.0.0, < 6.1.7601.25740
Vendor Microsoft Product Windows Server 2012 Default
unknown
Affected
- ≥ 6.2.0, < 6.2.9200.23490
Vendor Microsoft Product Windows Server 2012 (Server Core installation) Default
unknown
Affected
- ≥ 6.2.0, < 6.2.9200.23490
Vendor Microsoft Product Windows Server 2012 R2 Default
unknown
Affected
- ≥ 6.3.0, < 6.3.9600.20144
Vendor Microsoft Product Windows Server 2012 R2 (Server Core installation) Default
unknown
Affected
- ≥ 6.3.0, < 6.3.9600.20144
Vendor Microsoft Product Windows Server 2016 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.14393.4704
Vendor Microsoft Product Windows Server 2016 (Server Core installation) Default
unknown
Affected
- ≥ 10.0.0, < 10.0.14393.4704
Vendor Microsoft Product Windows Server 2019 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.17763.2237
Vendor Microsoft Product Windows Server 2019 (Server Core installation) Default
unknown
Affected
- ≥ 10.0.0, < 10.0.17763.2237
Vendor Microsoft Product Windows Server version 2004 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.19041.1288
Vendor Microsoft Product Windows Server version 20H2 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.19042.1288

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Windows 10 Version 1507	unknown	Affected ≥ 10.0.0, < 10.0.10240.19086
Microsoft	Windows 10 Version 1607	unknown	Affected ≥ 10.0.0, < 10.0.14393.4704
Microsoft	Windows 10 Version 1809	unknown	Affected ≥ 10.0.0, < 10.0.17763.2237
Microsoft	Windows 10 Version 1909	unknown	Affected ≥ 10.0.0, < 10.0.18363.1854
Microsoft	Windows 10 Version 2004	unknown	Affected ≥ 10.0.0, < 10.0.19041.1288
Microsoft	Windows 10 Version 20H2	unknown	Affected ≥ 10.0.0, < 10.0.19042.1288
Microsoft	Windows 10 Version 21H1	unknown	Affected ≥ 10.0.0, < 10.0.19043.1288
Microsoft	Windows 7	unknown	Affected ≥ 6.1.0, < 6.1.7601.25740
Microsoft	Windows 7 Service Pack 1	unknown	Affected ≥ 6.1.0, < 6.1.7601.25740
Microsoft	Windows 8.1	unknown	Affected ≥ 6.3.0, < 6.3.9600.20144
Microsoft	Windows Server 2008 R2 Service Pack 1	unknown	Affected ≥ 6.1.0, < 6.1.7601.25740
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	unknown	Affected ≥ 6.0.0, < 6.1.7601.25740
Microsoft	Windows Server 2012	unknown	Affected ≥ 6.2.0, < 6.2.9200.23490
Microsoft	Windows Server 2012 (Server Core installation)	unknown	Affected ≥ 6.2.0, < 6.2.9200.23490
Microsoft	Windows Server 2012 R2	unknown	Affected ≥ 6.3.0, < 6.3.9600.20144
Microsoft	Windows Server 2012 R2 (Server Core installation)	unknown	Affected ≥ 6.3.0, < 6.3.9600.20144
Microsoft	Windows Server 2016	unknown	Affected ≥ 10.0.0, < 10.0.14393.4704
Microsoft	Windows Server 2016 (Server Core installation)	unknown	Affected ≥ 10.0.0, < 10.0.14393.4704
Microsoft	Windows Server 2019	unknown	Affected ≥ 10.0.0, < 10.0.17763.2237
Microsoft	Windows Server 2019 (Server Core installation)	unknown	Affected ≥ 10.0.0, < 10.0.17763.2237
Microsoft	Windows Server version 2004	unknown	Affected ≥ 10.0.0, < 10.0.19041.1288
Microsoft	Windows Server version 20H2	unknown	Affected ≥ 10.0.0, < 10.0.19042.1288

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-28364
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41335
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-28364		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41335		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Oct 13, 2021

Updated Aug 4, 2024

Reserved Sep 17, 2021

Link CVE-2021-41335

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2021-41335

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Oct 13, 2021

Updated Aug 4, 2024

Link EUVD-2021-28364

GitHub

No data