CVSS: 7.8EPSS: 27%CPEs: 21EXPL: 0CVE-2021-41340 – Windows Graphics Component Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-41340
Windows Graphics Component Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Windows Graphics Component • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41340 •
CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 0CVE-2021-41335 – Windows Kernel Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-41335
Windows Kernel Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Windows Kernel • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41335 • CWE-269: Improper Privilege Management •
CVSS: 6.5EPSS: 1%CPEs: 21EXPL: 0CVE-2021-41332 – Windows Print Spooler Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-41332
Windows Print Spooler Information Disclosure Vulnerability Una vulnerabilidad en la Divulgación de Información de Windows Print Spooler • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41332 •
CVSS: 7.8EPSS: 27%CPEs: 18EXPL: 0CVE-2021-41331 – Windows Media Audio Decoder Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-41331
Windows Media Audio Decoder Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Windows Media Audio Decoder • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41331 •
CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 0CVE-2021-40489 – Storage Spaces Controller Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-40489
Storage Spaces Controller Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Storage Spaces Controller. Este ID de CVE es diferente de CVE-2021-26441, CVE-2021-40478, CVE-2021-40488, CVE-2021-41345 This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys driver. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40489 https://www.zerodayinitiative.com/advisories/ZDI-21-1156 • CWE-269: Improper Privilege Management •