CVE-2021-43893

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Affected

Microsoft · Windows 10 Version 1809 · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1909 · Windows 10 Version 21H1 · Windows Server 2022

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P

EPSS

6.72% chance of exploitation in the next 30 days, 94th percentile

Published

2021-12-15

Updated

2024-08-04

Proof-of-concept exploits (3)

• jbaines-r7/blankspace64★ · 2022-02-14
• michealadams30/Cve-2022-268090★ · 2022-12-26
• yuanLink/CVE-2022-2680961★ · 2022-05-25

Security advisories

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43893
• http://packetstormsecurity.com/files/165560/Microsoft-Windows-EFSRPC-Arbitrary-File-Uploa…

References

• CVE Record
• NVD entry

Related

• CVE-2020-2509
• CVE-2021-1585
• CVE-2021-20038
• CVE-2021-41379
• CVE-2022-20828
• CVE-2022-20829