CVE-2021-38624: Windows Key Storage Provider Security Feature Bypass Vulnerability
Windows Key Storage Provider Security Feature Bypass Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19042.1288Patch KB5006670 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19041.1288Patch KB5006670 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.258Patch KB5006674 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.288Patch KB5006699 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19043.1288Patch KB5006670 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.18363.1854Patch KB5006667 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.2237Patch KB5006672
Event History
Frequently Asked Questions
What is the severity of CVE-2021-38624?
CVE-2021-38624 has a severity rating that indicates a security feature bypass vulnerability affecting Windows Key Storage Provider.
How do I fix CVE-2021-38624?
To fix CVE-2021-38624, you should apply the relevant security updates provided by Microsoft for the affected Windows versions.
Which Windows versions are affected by CVE-2021-38624?
CVE-2021-38624 affects multiple Windows versions, including Windows 10 (20H2, 21H1, 1809, 1909, 2004) and Windows Server 2016, 2019, and 2022.
What type of vulnerability is CVE-2021-38624?
CVE-2021-38624 is classified as a security feature bypass vulnerability, which could lead to unauthorized access.
Can CVE-2021-38624 be exploited remotely?
CVE-2021-38624 does not require authentication for exploitation, making it a potential risk for remote attackers.