CVE-2021-26442: Windows HTTP.sys Elevation of Privilege Vulnerability
Published Oct 13, 2021
·Updated
Windows HTTP.sys Elevation of Privilege Vulnerability
Affected Software
20 affected components
Microsoft Windows 10
Microsoft Windows 10=20h2
Microsoft Windows 10=21h1
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows 11
Microsoft Windows 11
Microsoft Windows 7=sp1
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Remediation
Event History
Oct 13, 2021
CVE Published
12:26 AM
Data Sourced
12:26 AM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2021-26442?
CVE-2021-26442 is a vulnerability in Windows HTTP.sys that allows for elevation of privilege.
2
Which software versions are affected by CVE-2021-26442?
Windows 10, Windows 11, Windows 7, Windows 8.1, Windows RT 8.1, and various Windows Server versions are affected by CVE-2021-26442.
3
What is the severity of CVE-2021-26442?
CVE-2021-26442 has a high severity rating with a severity value of 7.
4
How can I fix CVE-2021-26442?
Apply the latest security updates provided by Microsoft to fix CVE-2021-26442.
5
Where can I find more information about CVE-2021-26442?
You can find more information about CVE-2021-26442 on the Microsoft Security Guidance Advisory page: [https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26442](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26442)