CVE-2021-31958: Windows NTLM Elevation of Privilege Vulnerability
Published Jun 8, 2021
·Updated
Windows NTLM Elevation of Privilege Vulnerability
Affected Software
19 affected components
Microsoft Windows 10
Microsoft Windows 10=20h2
Microsoft Windows 10=21h1
Microsoft Windows 10=1607
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows 7=sp1
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=1909
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Remediation
Event History
Jun 8, 2021
CVE Published
10:46 PM
Data Sourced
10:46 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2021-31958?
CVE-2021-31958 is a Windows NTLM Elevation of Privilege Vulnerability.
2
Which software is affected by CVE-2021-31958?
Microsoft Windows 10, Windows 7, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows Server 2016, and Windows Server 2019 are affected by CVE-2021-31958.
3
What is the severity of CVE-2021-31958?
CVE-2021-31958 has a severity rating of 7.5 (high).
4
How can I fix CVE-2021-31958?
Microsoft has released a security update to address CVE-2021-31958. Please refer to the official Microsoft security advisory for more information.
5
What is the Common Weakness Enumeration (CWE) for CVE-2021-31958?
The CWE for CVE-2021-31958 is CWE-294 (Authentication Bypass by Capture-replay).