CVE-2021-41333 – Windows Print Spooler Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-41333
Windows Print Spooler Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Windows Print Spooler This vulnerability allows local attackers to escape the low integrity sandbox on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Print Spooler service. The service can be abused to create an arbitrary file. An attacker can leverage this vulnerability to execute code in the context of the current user at medium integrity. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41333 https://www.zerodayinitiative.com/advisories/ZDI-21-1552 •
CVE-2021-40441 – Windows Media Center Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-40441
Windows Media Center Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Windows Media Center • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40441 •
CVE-2021-3718
https://notcve.org/view.php?id=CVE-2021-3718
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS. Se ha informado de una vulnerabilidad de denegación de servicio en algunos modelos de ThinkPad que podría causar el bloqueo del sistema cuando la configuración de biometría mejorada está activada en la BIOS • https://support.lenovo.com/us/en/product_security/LEN-72619 • CWE-232: Improper Handling of Undefined Values •
CVE-2021-42285 – Windows Kernel Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-42285
Windows Kernel Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en el Kernel de Windows • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42285 • CWE-269: Improper Privilege Management •
CVE-2021-42284 – Windows Hyper-V Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2021-42284
Windows Hyper-V Denial of Service Vulnerability Una vulnerabilidad de denegación de servicio en Windows Hyper-V • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42284 •