CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 0CVE-2021-34514 – Windows Kernel Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-34514
Windows Kernel Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Windows Kernel Este CVE ID es diferente de CVE-2021-31979, CVE-2021-33771 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34514 • CWE-269: Improper Privilege Management •
CVSS: 8.8EPSS: 0%CPEs: 7EXPL: 0CVE-2021-34513 – Storage Spaces Controller Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-34513
Storage Spaces Controller Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Storage Spaces Controller. Este ID de CVE es diferente de CVE-2021-33751, CVE-2021-34460, CVE-2021-34510, CVE-2021-34512 This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys driver. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34513 https://www.zerodayinitiative.com/advisories/ZDI-21-875 • CWE-190: Integer Overflow or Wraparound •
CVSS: 8.8EPSS: 0%CPEs: 11EXPL: 0CVE-2021-34512 – Storage Spaces Controller Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-34512
Storage Spaces Controller Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Storage Spaces Controller. Este ID de CVE es diferente de CVE-2021-33751, CVE-2021-34460, CVE-2021-34510, CVE-2021-34513 This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys driver. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34512 https://www.zerodayinitiative.com/advisories/ZDI-21-820 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 16EXPL: 0CVE-2021-34511 – Windows Installer Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-34511
Windows Installer Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios de Windows Installer • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34511 • CWE-269: Improper Privilege Management •
CVSS: 8.8EPSS: 0%CPEs: 9EXPL: 0CVE-2021-34510 – Storage Spaces Controller Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-34510
Storage Spaces Controller Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Storage Spaces Controller. Este ID de CVE es diferente de CVE-2021-33751, CVE-2021-34460, CVE-2021-34512, CVE-2021-34513 This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys driver. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34510 https://www.zerodayinitiative.com/advisories/ZDI-21-975 • CWE-190: Integer Overflow or Wraparound •