CVE-2021-31979: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Kernel Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
A flaw in the Windows Kernel allows an attacker with local access to run code with system-level privileges, potentially taking complete control of the computer. This is dangerous because it lets ordinary programs escalate to administrator rights without authorization.
A buffer overflow vulnerability (CWE-119) in the Windows Kernel permits local privilege escalation when a specially crafted request is processed. Requires prior local code execution; successful exploitation grants SYSTEM-level privileges, enabling full system compromise.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.