CVE-2021-31961: Microsoft Windows InstallService Time-Of-Check Time-Of-Use Denial-of-Service Vulnerability
Windows InstallService Elevation of Privilege Vulnerability
Other sources
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Microsoft Store Install Service. The issue results from the lack of proper locking when performing operations on a file. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
— ZDI
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19043.1110Patch KB5004237 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19041.1110Patch KB5004237 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19042.1110Patch KB5004237 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.18363.1679Patch KB5004245 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.2061Patch KB5004244
Event History
Frequently Asked Questions
What is the severity of CVE-2021-31961?
CVE-2021-31961 has a severity rating that requires immediate attention as it allows local attackers to cause a denial-of-service condition.
How can I mitigate CVE-2021-31961?
To mitigate CVE-2021-31961, it's essential to apply the latest security patches provided by Microsoft for the affected Windows versions.
Which versions of Windows are affected by CVE-2021-31961?
CVE-2021-31961 affects various versions of Windows 10, including 1809, 1909, 2004, 20H2, and 21H1, as well as Windows Server 2019.
What is the nature of CVE-2021-31961 vulnerability?
CVE-2021-31961 is categorized as an elevation of privilege vulnerability affecting the Windows InstallService.
What are the possible consequences of exploiting CVE-2021-31961?
Exploiting CVE-2021-31961 can lead to a denial-of-service condition, impacting system availability.