CVE-2021-28476 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.9 CRITICAL	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
microsoft	CNA	9.9 CRITICAL				CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 98%

Affected Products (NVD)

Vendor	Product	Version
microsoft	windows_10	-
microsoft	windows_7	-
microsoft	windows_8.1	-
microsoft	windows_server_2008	-
microsoft	windows_server_2012	-
microsoft	windows_server_2016	-
microsoft	windows_server_2019	-

𝑥

= Vulnerable software versions

Windows Releases

Platform

Version

Windows 10

(x64)	KB5003172
1607 (x64)	KB5003197
1803 (x64)	KB5003174
1809 (x64)	KB5003171
1909 (x64)	KB5003169
2004 (x64)	KB5003173

Windows 7

Service Pack 1 (x64)

Windows 8.1

(x64)

Windows Server

1909 Server Core	KB5003169
2004 Server Core	KB5003173
20H2 Server Core	KB5003173

Windows Server 2008

Service Pack 2 (x64)	KB5003225
Service Pack 2 Server Core (x64)	KB5003225

Windows Server 2008 R2

Service Pack 1 (x64)	KB5003233
Service Pack 1 Server Core (x64)	KB5003233

Windows Server 2012

Server Core	KB5003208
Standard	KB5003208

Windows Server 2012 R2

Server Core	KB5003220
Standard	KB5003220

Windows Server 2016

Server Core	KB5003197
Standard	KB5003197

Windows Server 2019

Server Core	KB5003171
Standard	KB5003171

References

http://packetstormsecurity.com/files/163497/Microsoft-Hyper-V-vmswitch.sys-Proof-Of-Concept.html

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28476

http://packetstormsecurity.com/files/163497/Microsoft-Hyper-V-vmswitch.sys-Proof-Of-Concept.html

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28476