CVE-2021-31956: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows NTFS Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply updates per vendor instructions.
A flaw in Windows NTFS file system allows a local attacker to gain higher privileges on the system. An attacker who already has access to a user account can exploit this vulnerability to gain administrator-level permissions.
This integer underflow vulnerability in the Windows NTFS driver allows a local, authenticated attacker to escalate privileges through specially crafted file operations. The attack requires existing user-level access and results in kernel-mode code execution with SYSTEM privileges.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.