Home

CVE-2021-26898

Description

Windows Event Tracing Elevation of Privilege Vulnerability

Risk Information

Base Score
7.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
0.51

Associated Vulnerability

VulnerabilityOS Platform
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows 10 Version 20H2 for x86-based Systems (KB5000802)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows 10 Version 20H2 for x64-based Systems (KB5000802)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows 10 Version 2004 for x86-based Systems (KB5000802)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows 10 Version 2004 for x64-based Systems (KB5000802)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows Server, version 2004 for x64-based Systems (KB5000802)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB5000809)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB5000809)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows 10 Version 1909 for x86-based Systems (KB5000808)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows Server, version 1909 for x64-based Systems (KB5000808)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows 10 Version 1909 for x64-based Systems (KB5000808)Windows
Windows User Profile Service Elevation of Privilege Vulnerability for Windows Server 2008 for x64-based Systems (KB5000856) (ESU)Windows
Windows User Profile Service Elevation of Privilege Vulnerability for Windows Server 2008 for x86-based Systems (KB5000856) (ESU)Windows
Windows User Profile Service Elevation of Privilege Vulnerability for Windows Server 2008 for x86-based Systems (KB5000844) (ESU)Windows
Windows User Profile Service Elevation of Privilege Vulnerability for Windows Server 2008 for x64-based Systems (KB5000844) (ESU)Windows
User Profile Service Denial of Service Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB5000853)Windows
User Profile Service Denial of Service Vulnerability for Windows 8.1 for x86-based Systems (KB5000853)Windows
User Profile Service Denial of Service Vulnerability for Windows 8.1 for x64-based Systems (KB5000853)Windows
User Profile Service Denial of Service Vulnerability for Windows 8.1 for x64-based Systems (KB5000848)Windows
User Profile Service Denial of Service Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB5000848)Windows
User Profile Service Denial of Service Vulnerability for Windows 8.1 for x86-based Systems (KB5000848)Windows
Windows User Profile Service Elevation of Privilege Vulnerability for Windows 7 for x86-based Systems (KB5000851) (ESU)Windows
Windows User Profile Service Elevation of Privilege Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB5000851) (ESU)Windows
Windows User Profile Service Elevation of Privilege Vulnerability for Windows 7 for x64-based Systems (KB5000851) (ESU)Windows
Windows User Profile Service Elevation of Privilege Vulnerability for Windows 7 for x86-based Systems (KB5000841) (ESU)Windows
Windows User Profile Service Elevation of Privilege Vulnerability for Windows 7 for x64-based Systems (KB5000841) (ESU)Windows
Windows User Profile Service Elevation of Privilege Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB5000841) (ESU)Windows
User Profile Service Denial of Service Vulnerability for Windows Server 2012 for x64-based Systems (KB5000840)Windows
User Profile Service Denial of Service Vulnerability for Windows Server 2012 for x64-based Systems (KB5000847)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows 10 Version 1809 for x86-based Systems (KB5000822)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows Server 2019 for x64-based Systems (KB5000822)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows 10 Version 1809 for x64-based Systems (KB5000822)Windows
User Profile Service Denial of Service Vulnerability for Windows 10 Version 1507 for x64-based Systems (KB5000807)Windows
User Profile Service Denial of Service Vulnerability for Windows 10 Version 1507 for x86-based Systems (KB5000807)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows Server 2016 for x64-based Systems (KB5000803)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB5000803)Windows
Storage Spaces Controller Elevation of Privilege Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB5000803)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-309722021-03 Cumulative Update for Windows 10 Version 20H2 for x86-based Systems (KB5000802) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309732021-03 Cumulative Update for Windows 10 Version 20H2 for x64-based Systems (KB5000802) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309742021-03 Cumulative Update for Windows 10 Version 2004 for x86-based Systems (KB5000802) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309752021-03 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB5000802) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309762021-03 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB5000802) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309622021-03 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB5000809) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309632021-03 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB5000809) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309672021-03 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB5000808) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309682021-03 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB5000808) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309692021-03 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB5000808) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309892021-03 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5000856) (ESU) (CVE-2021-27077)
PATCH-309902021-03 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB5000856) (ESU) (CVE-2021-27077)
PATCH-309942021-03 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems (KB5000844) (ESU) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309952021-03 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB5000844) (ESU) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309452021-03 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems (KB5000853) (CVE-2021-27077)
PATCH-309462021-03 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB5000853) (CVE-2021-27077)
PATCH-309472021-03 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB5000853) (CVE-2021-27077)
PATCH-309582021-03 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB5000848) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309592021-03 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB5000848) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309602021-03 Security Monthly Quality Rollup for Windows 8.1 for x86-based Systems (KB5000848) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309862021-03 Security Only Quality Update for Windows 7 for x86-based Systems (KB5000851) (ESU) (CVE-2021-27077)
PATCH-309872021-03 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5000851) (ESU) (CVE-2021-27077)
PATCH-309882021-03 Security Only Quality Update for Windows 7 for x64-based Systems (KB5000851) (ESU) (CVE-2021-27077)
PATCH-309912021-03 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB5000841) (ESU) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309922021-03 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB5000841) (ESU) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309932021-03 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB5000841) (ESU) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309482021-03 Security Only Quality Update for Windows Server 2012 for x64-based Systems (KB5000840)
PATCH-309612021-03 Security Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB5000847) (CVE-2021-26411)
PATCH-309642021-03 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5000822) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309652021-03 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5000822) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309662021-03 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5000822) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309812021-03 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB5000807) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309822021-03 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB5000807) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309832021-03 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5000803) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309842021-03 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5000803) (CVE-2021-27077) (CVE-2021-26411)
PATCH-309852021-03 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5000803) (CVE-2021-27077) (CVE-2021-26411)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234