CVSS: 8.8EPSS: 0%CPEs: 11EXPL: 0CVE-2021-34512 – Storage Spaces Controller Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-34512
Storage Spaces Controller Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Storage Spaces Controller. Este ID de CVE es diferente de CVE-2021-33751, CVE-2021-34460, CVE-2021-34510, CVE-2021-34513 This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys driver. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34512 https://www.zerodayinitiative.com/advisories/ZDI-21-820 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 16EXPL: 0CVE-2021-34511 – Windows Installer Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-34511
Windows Installer Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios de Windows Installer • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34511 • CWE-269: Improper Privilege Management •
CVSS: 8.8EPSS: 0%CPEs: 9EXPL: 0CVE-2021-34510 – Storage Spaces Controller Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-34510
Storage Spaces Controller Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Storage Spaces Controller. Este ID de CVE es diferente de CVE-2021-33751, CVE-2021-34460, CVE-2021-34512, CVE-2021-34513 This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys driver. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34510 https://www.zerodayinitiative.com/advisories/ZDI-21-975 • CWE-190: Integer Overflow or Wraparound •
CVSS: 5.5EPSS: 0%CPEs: 11EXPL: 0CVE-2021-34509 – Storage Spaces Controller Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-34509
Storage Spaces Controller Information Disclosure Vulnerability Una vulnerabilidad de Divulgación de Información de Storage Spaces Controller • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34509 •
CVSS: 8.8EPSS: 1%CPEs: 9EXPL: 0CVE-2021-34508 – Windows Kernel Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-34508
Windows Kernel Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Windows Kernel. Este ID de CVE es diferente de CVE-2021-34458 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34508 •