Lucene search

K
mscveMicrosoftMS:CVE-2021-40470
HistoryOct 12, 2021 - 7:00 a.m.

DirectX Graphics Kernel Elevation of Privilege Vulnerability

2021-10-1207:00:00
Microsoft
msrc.microsoft.com
11
directx graphics kernel
elevation of privilege
vulnerability
microsoft

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0

Percentile

9.5%

Affected configurations

Vulners
Node
microsoftwindows_server_2016Range<10.0.14393.4704
OR
microsoftwindows_server_2016Range<10.0.14393.4704
OR
microsoftwindows_10_1607Range<10.0.14393.4704
OR
microsoftwindows_10_1607Range<10.0.14393.4704
OR
microsoftwindows_10_1507Range<10.0.10240.19086
OR
microsoftwindows_10_1507Range<10.0.10240.19086
OR
microsoftwindows_11_21h2Range<10.0.22000.258
OR
microsoftwindows_11_21h2Range<10.0.22000.258
OR
microsoftwindows_server_20h2Range<10.0.19042.1288
OR
microsoftwindows_10_20h2Range<10.0.19042.1288
OR
microsoftwindows_10_20h2Range<10.0.19042.1288
OR
microsoftwindows_server_2004Range<10.0.19041.1288
OR
microsoftwindows_10_1809Range<10.0.19041.1288
OR
microsoftwindows_10_1809Range<10.0.19041.1288
OR
microsoftwindows_10_1809Range<10.0.19041.1288
OR
microsoftwindows_server_2022Range<10.0.20348.288
OR
microsoftwindows_server_2022Range<10.0.20348.288
OR
microsoftwindows_10_21h1Range<10.0.19043.1288
OR
microsoftwindows_10_21h1Range<10.0.19043.1288
OR
microsoftwindows_10_21h1Range<10.0.19043.1288
OR
microsoftwindows_10_1809Range<10.0.18363.1854
OR
microsoftwindows_10_1909Range<10.0.18363.1854
OR
microsoftwindows_10_1909Range<10.0.18363.1854
OR
microsoftwindows_server_2019Range<10.0.17763.2237
OR
microsoftwindows_server_2019Range<10.0.17763.2237
OR
microsoftwindows_10_1809Range<10.0.17763.2237
OR
microsoftwindows_10_1809Range<10.0.17763.2237
OR
microsoftwindows_10_1809Range<10.0.17763.2237
VendorProductVersionCPE
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*
microsoftwindows_11_21h2*cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
microsoftwindows_server_20h2*cpe:2.3:o:microsoft:windows_server_20h2:*:*:*:*:*:*:*:*
microsoftwindows_10_20h2*cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*
microsoftwindows_server_2004*cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0

Percentile

9.5%