CVE Watch10 de ago. de 2026

CVE-2021-38648

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

CVSS

7.8

Alta

EPSS

11.4%

p96

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: 15 de set. de 2021 · Última mod.: 10 de ago. de 2026

EPSS · 30d

11.4%EPSS · 30 dias11.4%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / Open Management Infrastructure (OMI)

Vulnerabilidade

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

17 de nov. de 2021

Uso conhecido em ransomware

Não

Descrição resumida

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-38648

Descrição técnica

Open Management Infrastructure Elevation of Privilege Vulnerability

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2021-386497.0 ALT

86.9%

KEV—76Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability87d CVE-2021-386479.8 CRÍ

100.0%

KEV—80Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability87d CVE-2021-386457.8 ALT

86.1%

KEV—76Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability87d