CVE-2021-34489

DirectWrite Remote Code Execution Vulnerability
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 84.22%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10
-
microsoftwindows_server_2019
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
1809 (arm64, x64, x86)
KB5004244
1909 (arm64, x64, x86)
KB5004245
2004 (arm64, x64, x86)
KB5004237
20H2 (arm64, x86)
KB5004237
21H1 (arm64, x64, x86)
KB5004237
Windows Server
2004 Server Core
KB5004237
20H2 Server Core
KB5004237
Windows Server 2019
Server Core
KB5004244
Standard
KB5004244
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34489
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34489