CVE-2021-31201: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Published Jun 8, 2021
·Updated
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
Other sources
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Affected Software
19 affected components
Microsoft Enhanced Cryptographic Provider
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows 10 1507<10.0.10240.18967
Microsoft Windows 10 1607<10.0.14393.4467
Microsoft Windows 10 1809<10.0.17763.1999
Microsoft Windows 10 1909<10.0.18363.1621
Microsoft Windows 10 2004<10.0.19041.1052
Microsoft Windows 10 20h2<10.0.19042.1052
Microsoft Windows 10 21h1<10.0.19043.1052
Microsoft Windows 7=sp1
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2004<10.0.19041.1052
Microsoft Windows Server 2016<10.0.14393.4467
Microsoft Windows Server 2019<10.0.17763.1999
Microsoft Windows Server 20h2<10.0.19042.1052
Remediation
Event History
Jun 8, 2021
CVE Published
via MITRE·10:46 PM
Data Sourced
via MITRE·10:46 PM
DescriptionSeverity
Data Sourced
via NVD·11:15 PM
RemedyDescriptionSeverityAffected Software
Nov 3, 2021
Known Exploited
via CISA·12:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2021-31201?
CVE-2021-31201 is classified as a privilege escalation vulnerability.
2
How do I fix CVE-2021-31201?
To mitigate CVE-2021-31201, ensure that your Microsoft Enhanced Cryptographic Provider is updated to the latest version.
3
Which versions of Windows are affected by CVE-2021-31201?
CVE-2021-31201 affects multiple versions of Windows, including Windows 7, 8.1, 10, and several Windows Server versions.
4
What are the potential impacts of CVE-2021-31201?
The potential impact of CVE-2021-31201 includes unauthorized access and elevation of privileges on affected systems.
5
Is CVE-2021-31201 actively exploited in the wild?
There is no confirmed information about CVE-2021-31201 being actively exploited in the wild.