CVE Watch10 ago 2026

CVE-2021-38649

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

CVSS

7.0

Alto

EPSS

2.9%

p86

KEV

SÍ

3 nov 2021

Exploit Today

0-100

Publicado: 15 sept 2021 · Última mod.: 10 ago 2026

EPSS · 30d

2.0%EPSS · 30 días2.9%

2026-08-022026-08-30

Ficha del catálogo KEV

Producto

Microsoft / Open Management Infrastructure (OMI)

Vulnerabilidad

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

Añadido a KEV

3 nov 2021

Remediar antes de

17 nov 2021

Uso conocido en ransomware

Descripción resumida

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-38649

Descripción técnica

Open Management Infrastructure Elevation of Privilege Vulnerability

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-386487.8 ALT

95.7%

KEV—79Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability20d CVE-2021-386479.8 CRÍ

100.0%

KEV—80Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability20d CVE-2021-386457.8 ALT

85.0%

KEV—76Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability20d