CVE-2021-31979
Microsoft Windows Kernel Privilege Escalation Vulnerability
CVSS
7.8
Alta
EPSS
4.5%
p92
KEV
SIM
3 de nov. de 2021
Exploit Today
77
0-100
Publicado: 14 de jul. de 2021 · Última mod.: 10 de ago. de 2026 · CWE-119
4.5%EPSS · 30 dias4.5%
2026-10-082026-11-05
Produto
Microsoft / Windows
Vulnerabilidade
Microsoft Windows Kernel Privilege Escalation Vulnerability
Adicionado ao KEV
3 de nov. de 2021
Corrigir até
17 de nov. de 2021
Uso conhecido em ransomware
Não
Descrição resumida
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2021-31979
Windows Kernel Elevation of Privilege Vulnerability
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1221896.3 MÉD15.4%
——5A vulnerability has been found in OpenPPL ppl.nn up to bb84dc9952809b3a5a0036858a3d9f68af1c83d5. The affected element is the function OptGraph::InitQuantization of the file src/ppl/nn/engines/cuda/optimizer/opt_graph.cc of the component CUDA Optimizer. Such manipulation of the argument per_channel/bit_width/tensor_max/tensor_min/scale leads to out-of-bounds read. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.21hCVE-2026-1221467.3 ALT22.1%
——7A weakness has been identified in 101arrowz fflate up to 0.8.3. This issue affects the function unzipSync of the file esm/index.mjs. This manipulation causes memory corruption. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.23hCVE-2026-1216177.5 ALT40.8%
——12A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is the function init_multipart of the file /cgi-bin/upload_fw.cgi of the component Header Parser. The manipulation results in out-of-bounds write. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.2dCVE-2026-1216165.3 MÉD23.0%
——7A vulnerability was identified in Linksys E5600 1.1.0.26. Affected by this vulnerability is the function strcpy of the file /cgi-bin/mesh_login.cgi of the component JSON Request Parser. The manipulation of the argument username/password/token/source/cn/action leads to out-of-bounds write. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.2dCVE-2026-1216009.9 CRÍ40.5%
——12A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.2dCVE-2026-1215999.9 CRÍ40.5%
——12A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of the component Multi-SSID Configuration. The manipulation of the argument wepkey2/wepkey3 results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.2d