CVE-2021-3146: High severity Dolby Audio X2 vulnerability
Published Apr 8, 2021
·Updated
The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain privileges.
Affected Software
20 affected components
Dolby Audio X2<0.8.8.90
Microsoft Exchange Server=2010-sp3
Microsoft Exchange Server=2013
Microsoft Visual C\+\+=2005-sp1
Microsoft Visual C\+\+=2008-sp1
Microsoft Visual C\+\+=2010
Microsoft Visual Studio=2005-sp1
Microsoft Visual Studio=2008-sp1
Microsoft Visual Studio=2010
Microsoft Visual Studio .NET=2003-sp1
All of the following
Dolby Audio X2<0.8.8.90
Any of the following
Microsoft Exchange Server=2010-sp3
Microsoft Exchange Server=2013
Microsoft Visual C\+\+=2005-sp1
Microsoft Visual C\+\+=2008-sp1
Microsoft Visual C\+\+=2010
Microsoft Visual Studio=2005-sp1
Microsoft Visual Studio=2008-sp1
Microsoft Visual Studio=2010
Microsoft Visual Studio .NET=2003-sp1
Event History
Apr 8, 2021
CVE Published
via MITRE·07:46 PM
Data Sourced
via MITRE·07:46 PM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-3146?
CVE-2021-3146 refers to the vulnerability in the Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows that allows local users to gain privileges.
2
How severe is CVE-2021-3146?
CVE-2021-3146 has a severity value of 7.8 out of 10, indicating a high severity.
3
Which software is affected by CVE-2021-3146?
The Dolby Audio X2 (DAX2) API service before version 0.8.8.90 on Windows is affected.
4
How can local users gain privileges with CVE-2021-3146?
Local users can gain privileges by exploiting the vulnerability in the Dolby Audio X2 (DAX2) API service before version 0.8.8.90 on Windows.
5
Where can I find more information about CVE-2021-3146?
More information about CVE-2021-3146 can be found in the security advisory provided by Dolby: https://professional.dolby.com/siteassets/pdfs/dolby-dax2-security-advisory-2021-04-07.pdf