CVE Watch—

CVE-2021-38648

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

CVSS

—

Sin CVSS

EPSS

11.4%

p96

KEV

SÍ

3 nov 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

10.9%EPSS · 30 días11.4%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Microsoft / Open Management Infrastructure (OMI)

Vulnerabilidad

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

Añadido a KEV

3 nov 2021

Remediar antes de

17 nov 2021

Uso conocido en ransomware

Descripción resumida

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-38648

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-38647—

100.0%

KEV—80Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability—CVE-2021-38649—

78.5%

KEV—74Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability—CVE-2021-38645—

77.2%

KEV—73Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability—