CVSS: 7.8EPSS: 0%CPEs: 16EXPL: 0CVE-2021-34511 – Windows Installer Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-34511
Windows Installer Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios de Windows Installer • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34511 • CWE-269: Improper Privilege Management •
CVSS: 6.5EPSS: 36%CPEs: 18EXPL: 0CVE-2021-34507 – Windows Remote Assistance Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-34507
Windows Remote Assistance Information Disclosure Vulnerability Una vulnerabilidad de Divulgación de Información en Windows Remote Assistance • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34507 •
CVSS: 7.8EPSS: 1%CPEs: 18EXPL: 0CVE-2021-34504 – Windows Address Book Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-34504
Windows Address Book Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Windows Address Book • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34504 •
CVSS: 7.7EPSS: 0%CPEs: 18EXPL: 0CVE-2021-34500 – Windows Kernel Memory Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-34500
Windows Kernel Memory Information Disclosure Vulnerability Una vulnerabilidad de Divulgación de Información en Windows Kernel Memory • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34500 •
CVSS: 8.8EPSS: 86%CPEs: 18EXPL: 0CVE-2021-34498 – Windows GDI Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-34498
Windows GDI Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Windows GDI This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of bitmap objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34498 https://www.zerodayinitiative.com/advisories/ZDI-21-825 • CWE-416: Use After Free •