CVE-2021-31956
Windows NTFS Elevation of Privilege Vulnerability
- Severity
- 7.8 / 10
- High · CVSS 3.1
- Exploit chance (EPSS)
- 22.27%
- Chance of exploitation in the next 30 days. Higher than 97.68% of scored vulnerabilities.
- Known exploited
- Yes
- In CISA's catalog since Nov 3, 2021
- Weakness
- CWE-191 Integer Underflow (Wrap or Wraparound)
- CWE-191 Integer Underflow (Wrap or Wraparound)
- Fix
- None yet
- No fixed version published
Description
Windows NTFS Elevation of Privilege Vulnerability
How to fix
No fixed version has been published yet. Until one is, remove or replace the package, or turn off or isolate the affected feature. This page updates when a fix ships.
Severity breakdown
CVSS 3.1 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- Low
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Weakness
CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
References
Advisories
Other links
Timeline
- Published
- Added to CISA's Known Exploited Vulnerabilities catalog
- Remediation due for U.S. federal agencies
- Last updated by the source
- Latest EPSS score
Related advisories
| Advisory | Severity | Why it's related |
|---|---|---|
| GHSA-p7gw-2pcp-5pf8 Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped) | Critical | Same weakness, CWE-191 |
| GHSA-7wff-wpr6-vmhm ImageMagick: Heap Buffer Over-Read in IPTC encoder | Medium | Same weakness, CWE-191 |
| GHSA-82j2-j2ch-gfr8 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING | High | Same weakness, CWE-191 |
| GHSA-cr67-pvmx-2pp2 ImageMagick has a heap-Buffer-Overflow write of a single zero byte when parsing xml. | Medium | Same weakness, CWE-191 |
| GHSA-wpp4-vqfq-v4hp ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS) | Medium | Same weakness, CWE-191 |
| GHSA-h7jm-g87p-5935 Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability | High | Same weakness, CWE-191 |
| GHSA-38fq-h5hc-gwv8 Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability | High | Same weakness, CWE-191 |
| GHSA-hx9q-2mx4-m4pg Missing validation causes denial of service via `Conv3DBackpropFilterV2` | Medium | Same weakness, CWE-191 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor