CVE-2021-28435: Windows Event Tracing Information Disclosure Vulnerability
Published Apr 13, 2021
·Updated
Windows Event Tracing Information Disclosure Vulnerability
Affected Software
15 affected components
Microsoft Windows 10
Microsoft Windows 10=20h2
Microsoft Windows 10=1607
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=1909
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Remediation
Event History
Apr 13, 2021
CVE Published
07:33 PM
Data Sourced
07:33 PM
DescriptionSeverity
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-28435?
CVE-2021-28435 is classified as a medium severity vulnerability.
2
How do I fix CVE-2021-28435?
To mitigate CVE-2021-28435, apply the latest security updates provided by Microsoft for the affected Windows versions.
3
What does CVE-2021-28435 affect?
CVE-2021-28435 affects various versions of Microsoft Windows 10, Windows 8.1, and Windows Server 2012, 2016, and 2019.
4
What type of vulnerability is CVE-2021-28435?
CVE-2021-28435 is an information disclosure vulnerability involving Windows Event Tracing.
5
Can CVE-2021-28435 be exploited remotely?
Exploitation of CVE-2021-28435 requires local access to the affected systems.