Lucene search

K
mscveMicrosoftMS:CVE-2021-41338
HistoryOct 12, 2021 - 7:00 a.m.

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

2021-10-1207:00:00
Microsoft
msrc.microsoft.com
49
windows
appcontainer
firewall
rules
security
bypass
vulnerability
microsoft

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0

Percentile

9.5%

Affected configurations

Vulners
Node
microsoftwindows_server_2016Range<10.0.14393.4704
OR
microsoftwindows_server_2016Range<10.0.14393.4704
OR
microsoftwindows_10_1607Range<10.0.14393.4704
OR
microsoftwindows_10_1607Range<10.0.14393.4704
OR
microsoftwindows_10_1507Range<10.0.10240.19086
OR
microsoftwindows_10_1507Range<10.0.10240.19086
OR
microsoftwindows_11_21h2Range<10.0.22000.258
OR
microsoftwindows_11_21h2Range<10.0.22000.258
OR
microsoftwindows_server_20h2Range<10.0.19042.1288
OR
microsoftwindows_10_20h2Range<10.0.19042.1288
OR
microsoftwindows_10_20h2Range<10.0.19042.1288
OR
microsoftwindows_server_2004Range<10.0.19041.1288
OR
microsoftwindows_10_1809Range<10.0.19041.1288
OR
microsoftwindows_10_1809Range<10.0.19041.1288
OR
microsoftwindows_10_1809Range<10.0.19041.1288
OR
microsoftwindows_server_2022Range<10.0.20348.288
OR
microsoftwindows_server_2022Range<10.0.20348.288
OR
microsoftwindows_10_21h1Range<10.0.19043.1288
OR
microsoftwindows_10_21h1Range<10.0.19043.1288
OR
microsoftwindows_10_21h1Range<10.0.19043.1288
OR
microsoftwindows_10_1809Range<10.0.18363.1854
OR
microsoftwindows_10_1909Range<10.0.18363.1854
OR
microsoftwindows_10_1909Range<10.0.18363.1854
OR
microsoftwindows_server_2019Range<10.0.17763.2237
OR
microsoftwindows_server_2019Range<10.0.17763.2237
OR
microsoftwindows_10_1809Range<10.0.17763.2237
OR
microsoftwindows_10_1809Range<10.0.17763.2237
OR
microsoftwindows_10_1809Range<10.0.17763.2237
VendorProductVersionCPE
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*
microsoftwindows_11_21h2*cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
microsoftwindows_server_20h2*cpe:2.3:o:microsoft:windows_server_20h2:*:*:*:*:*:*:*:*
microsoftwindows_10_20h2*cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*
microsoftwindows_server_2004*cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0

Percentile

9.5%