CVE-2021-31962: Kerberos AppContainer Security Feature Bypass Vulnerability

Published Jun 8, 2021

Updated

Kerberos AppContainer Security Feature Bypass Vulnerability

Affected Software

18 affected components

Microsoft Windows 10

Microsoft Windows 10=20h2

Microsoft Windows 10=21h1

Microsoft Windows 10=1607

Microsoft Windows 10=1809

Microsoft Windows 10=1909

Microsoft Windows 10=2004

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2016=20h2

Microsoft Windows Server 2016=2004

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31962

Event History

Jun 8, 2021

CVE Published

10:46 PM

Data Sourced

10:46 PM

DescriptionSeverity

Frequently Asked Questions

What is CVE-2021-31962?

CVE-2021-31962 is a Kerberos AppContainer Security Feature Bypass vulnerability.

How severe is CVE-2021-31962?

CVE-2021-31962 has a severity rating of 9.4 (Critical).

Which software is affected by CVE-2021-31962?

CVE-2021-31962 affects Microsoft Windows 10 (all versions), Windows 7 (SP1), Windows 8.1, Windows RT 8.1, Windows Server 2008 (all versions), Windows Server 2012 (all versions), Windows Server 2016 (all versions), and Windows Server 2019.

How can I fix CVE-2021-31962?

To fix CVE-2021-31962, users should apply the security patch provided by Microsoft.

Where can I find more information about CVE-2021-31962?

More information about CVE-2021-31962 can be found on the following websites: [packetstormsecurity.com](http://packetstormsecurity.com/files/163206/Windows-Kerberos-AppContainer-Enterprise-Authentication-Capability-Bypass.html) and [portal.msrc.microsoft.com](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31962).