CVE-2021-1637: Windows DNS Query Information Disclosure Vulnerability
Published Jan 12, 2021
·Updated
Windows DNS Query Information Disclosure Vulnerability
Affected Software
44 affected componentsFixes available
Microsoft Windows Server=2004
Microsoft Windows Server=1909
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012 R2
Microsoft Windows Server=20H2
Microsoft Windows RT 8.1
Microsoft Windows 8.1 for x64-based systems
Microsoft Windows 8.1 for 32-bit systems
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Windows Server 2016
Microsoft Windows 10
Microsoft Windows 10=20h2
Microsoft Windows 10=1607
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=1909
Microsoft Windows Server 2016=2004
Microsoft Windows 10=20H2
Microsoft Windows 10=20H2
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1607
Microsoft Windows 10=1607
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10
Microsoft Windows 10=1803
Microsoft Windows 10=1803
Microsoft Windows 10
Microsoft Windows 10=2004
Microsoft Windows 10=2004
Microsoft Windows 10=2004
Remediation
Event History
Jan 12, 2021
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·07:41 PM
Data Sourced
via MITRE·07:41 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2021-1637?
CVE-2021-1637 has a moderate severity rating as it leads to information disclosure in Windows DNS queries.
2
How do I fix CVE-2021-1637?
To fix CVE-2021-1637, install the latest security updates provided by Microsoft for your affected Windows versions.
3
Which versions of Windows are affected by CVE-2021-1637?
CVE-2021-1637 affects multiple versions of Windows 10, Windows Server, and Windows 8.1, particularly various builds from 1803 to 20H2.
4
Can exploiting CVE-2021-1637 allow remote access to my system?
Exploiting CVE-2021-1637 does not provide remote access but may allow unauthorized users to obtain sensitive information.
5
Is there a workaround for CVE-2021-1637 if I cannot apply the update immediately?
There are no documented workarounds for CVE-2021-1637; applying the update is the recommended action.