CVE-2021-33744: Windows Secure Kernel Mode Security Feature Bypass Vulnerability
Windows Secure Kernel Mode Security Feature Bypass Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19041.1110Patch KB5004237 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.2061Patch KB5004244 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19043.1110Patch KB5004237 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.18363.1679Patch KB5004245 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19042.1110Patch KB5004237
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
Exploitation requires local access, high privileges, and high attack complexity. It does not require user interaction.
Which systems can be affected?
The issue affects listed Microsoft Windows 10, Windows Server 2016, and Windows Server 2019 products. The provided data does not identify specific affected builds, editions, or whether the feature is enabled by default.
What is the likely security impact?
Successful exploitation can bypass a Secure Kernel Mode security feature and affect integrity across a changed security scope. The provided CVSS data indicates no confidentiality or availability impact.