CVE-2021-42286

EUVD-2021-29261
Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
microsoftCNA
7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 47%
Windows Releases
Platform
Version
Windows 10
2004 (arm64, x64, x86)
KB5007186
20H2 (arm64, x86)
KB5007186
21H1 (arm64, x64, x86)
KB5007186
Windows Server
2004 Server Core
KB5007186
20H2 Server Core
KB5007186
Common Weakness Enumeration
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42286
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42286