Lucene search

MicrosoftMS:CVE-2021-38638

HistorySep 14, 2021 - 7:00 a.m.

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2021-09-1407:00:00

Microsoft

msrc.microsoft.com

windows

ancillary function driver

elevation of privilege

vulnerability

microsoft

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

Percentile

9.5%

JSON

Affected configurations

Vulners

Node

microsoftwindows_server_2012Range<6.3.9600.20120r2

microsoftwindows_server_2012Range<6.2.9200.23462

microsoftwindows_server_2008Range<6.1.7601.25712r2x64

microsoftwindows_server_2008Range<6.0.6003.21218x64

microsoftwindows_server_2008Range<6.0.6003.21218

microsoftwindows_rt_8.1Range<6.3.9600.20120

microsoftwindows_8.1Range<6.3.9600.20120x64

microsoftwindows_8.1Range<6.3.9600.20120

microsoftwindows_7Range<6.1.7601.25712x64

microsoftwindows_7Range<6.1.7601.25712

microsoftwindows_server_2016Range<10.0.14393.4651

microsoftwindows_10_1607Range<10.0.14393.4651x64

microsoftwindows_10_1607Range<10.0.14393.4651

microsoftwindows_10Range<10.0.10240.19060x64

microsoftwindows_10Range<10.0.10240.19060

microsoftwindows_server_20h2Range<10.0.19042.1237

microsoftwindows_10_20h2Range<10.0.19042.1237arm64

microsoftwindows_10_20h2Range<10.0.19042.1237

microsoftwindows_10_20h2Range<10.0.19042.1237x64

microsoftwindows_server_2004Range<10.0.19041.1237

microsoftwindows_10_2004Range<10.0.19041.1237

microsoftwindows_server_2022Range<10.0.20348.230

microsoftwindows_10_21h1Range<10.0.19043.1237

microsoftwindows_10_21h1Range<10.0.19043.1237arm64

microsoftwindows_10_21h1Range<10.0.19043.1237x64

microsoftwindows_10_1909Range<10.0.18363.1801

microsoftwindows_server_2019Range<10.0.17763.2183

microsoftwindows_10_1809Range<10.0.17763.2183arm64

microsoftwindows_10_1809Range<10.0.17763.2183x64

microsoftwindows_10_1809Range<10.0.17763.2183

VendorProductVersionCPE
microsoftwindows_server_2012*cpe:2.3:o:microsoft:windows_server_2012:*:r2:*:*:*:*:*:*
microsoftwindows_server_2012*cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:r2:*:*:*:*:x64:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x64:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*
microsoftwindows_rt_8.1*cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*
microsoftwindows_8.1*cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*
microsoftwindows_8.1*cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:x64:*
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_server_2012	*	cpe:2.3:o:microsoft:windows_server_2012::r2::::::*
microsoft	windows_server_2012	*	cpe:2.3:o:microsoft:windows_server_2012::::::::
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008::r2:::::x64:
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008:::::::x64:*
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008::::::::
microsoft	windows_rt_8.1	*	cpe:2.3:o:microsoft:windows_rt_8.1::::::::
microsoft	windows_8.1	*	cpe:2.3:o:microsoft:windows_8.1:::::::x64:*
microsoft	windows_8.1	*	cpe:2.3:o:microsoft:windows_8.1::::::::
microsoft	windows_7	*	cpe:2.3:o:microsoft:windows_7:::::::x64:*
microsoft	windows_7	*	cpe:2.3:o:microsoft:windows_7::::::::