CVE-2021-36966

Description

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Risk Information

Base Score
7.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
0.183

Associated Vulnerability

VulnerabilityOS Platform
Windows Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 21H1 for x86-based Systems (KB5005565)Windows
Windows Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 21H1 for x64-based Systems (KB5005565)Windows
Windows Scripting Engine Memory Corruption Vulnerability for Windows Server, version 2004 for x64-based Systems (KB5005565)Windows
Windows Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 2004 for x86-based Systems (KB5005565)Windows
Windows Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 2004 for x64-based Systems (KB5005565)Windows
Windows Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 20H2 for x86-based Systems (KB5005565)Windows
Windows Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 20H2 for x64-based Systems (KB5005565)Windows
Windows Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1909 for x86-based Systems (KB5005566)Windows
Windows Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1909 for x64-based Systems (KB5005566)Windows
Windows Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1809 for x64-based Systems (KB5005568)Windows
Windows Scripting Engine Memory Corruption Vulnerability for Windows Server 2019 for x64-based Systems (KB5005568)Windows
Windows Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1809 for x86-based Systems (KB5005568)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-320712021-09 Cumulative Update for Windows 10 Version 21H1 for x86-based Systems (KB5005565) (CVE-2021-40444)
PATCH-320722021-09 Cumulative Update for Windows 10 Version 21H1 for x64-based Systems (KB5005565) (CVE-2021-40444)
PATCH-320732021-09 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB5005565) (CVE-2021-40444)
PATCH-320742021-09 Cumulative Update for Windows 10 Version 2004 for x86-based Systems (KB5005565) (CVE-2021-40444)
PATCH-320752021-09 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB5005565) (CVE-2021-40444)
PATCH-320762021-09 Cumulative Update for Windows 10 Version 20H2 for x86-based Systems (KB5005565) (CVE-2021-40444)
PATCH-320772021-09 Cumulative Update for Windows 10 Version 20H2 for x64-based Systems (KB5005565) (CVE-2021-40444)
PATCH-320782021-09 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB5005566) (CVE-2021-40444)
PATCH-320792021-09 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB5005566) (CVE-2021-40444)
PATCH-320802021-09 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5005568) (CVE-2021-40444)
PATCH-320812021-09 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5005568) (CVE-2021-40444)
PATCH-320822021-09 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5005568) (CVE-2021-40444)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234