CVE-2021-31199: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Published Jun 8, 2021
·Updated
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
Other sources
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Affected Software
19 affected components
Microsoft Enhanced Cryptographic Provider
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows 10 1507<10.0.10240.18967
Microsoft Windows 10 1607<10.0.14393.4467
Microsoft Windows 10 1809<10.0.17763.1999
Microsoft Windows 10 1909<10.0.18363.1621
Microsoft Windows 10 2004<10.0.19041.1052
Microsoft Windows 10 20h2<10.0.19042.1052
Microsoft Windows 10 21h1<10.0.19043.1052
Microsoft Windows 7=sp1
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2004<10.0.19041.1052
Microsoft Windows Server 2016<10.0.14393.4467
Microsoft Windows Server 2019<10.0.17763.1999
Microsoft Windows Server 20h2<10.0.19042.1052
Remediation
Event History
Jun 8, 2021
CVE Published
via MITRE·10:46 PM
Data Sourced
via MITRE·10:46 PM
DescriptionSeverity
Data Sourced
via NVD·11:15 PM
RemedyDescriptionSeverityAffected Software
Nov 3, 2021
Known Exploited
via CISA·12:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2021-31199?
CVE-2021-31199 is classified as a high severity vulnerability that allows for privilege escalation.
2
How do I fix CVE-2021-31199?
To fix CVE-2021-31199, you should apply the latest security updates provided by Microsoft for the affected systems.
3
Which systems are affected by CVE-2021-31199?
CVE-2021-31199 affects various versions of Microsoft Windows including Windows 7, Windows 10, and Windows Server editions.
4
What type of vulnerability is CVE-2021-31199?
CVE-2021-31199 is an elevation of privilege vulnerability in the Microsoft Enhanced Cryptographic Provider.
5
Can CVE-2021-31199 be exploited remotely?
CVE-2021-31199 requires local access to the vulnerable system for exploitation.