CVE Watch10 ago 2026

CVE-2021-38645

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

CVSS

7.8

Alto

EPSS

2.7%

p86

KEV

SÍ

3 nov 2021

Exploit Today

0-100

Publicado: 15 sept 2021 · Última mod.: 10 ago 2026

EPSS · 30d

2.7%EPSS · 30 días2.7%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Microsoft / Open Management Infrastructure (OMI)

Vulnerabilidad

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

Añadido a KEV

3 nov 2021

Remediar antes de

17 nov 2021

Uso conocido en ransomware

Descripción resumida

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-38645

Descripción técnica

Open Management Infrastructure Elevation of Privilege Vulnerability

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-386497.0 ALT

86.6%

KEV—76Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability65d CVE-2021-386487.8 ALT

96.0%

KEV—79Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability65d CVE-2021-386479.8 CRÍ

100.0%

KEV—80Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability65d