VDB

BDU%3A2021-04380

BDU%3A2021-04380 PUBLISHED CVSS 7.800000190734863 HIGH

Уязвимость службы профилей пользователя User Profile Service (ProfSvc) операционных систем Windows, позволяющая нарушителю повысить свои привилегии

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersions
MicrosoftWindows Server 2008 Service Pack 26.0.0
MicrosoftWindows Server version 200410.0.0
MicrosoftWindows 10 Version 190910.0.0
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)6.0.0
MicrosoftWindows 10 Version 150710.0.0
MicrosoftWindows Server 2019 (Server Core installation)10.0.0
MicrosoftWindows Server 2008 Service Pack 26.0.0
MicrosoftWindows Server 2012 R2 (Server Core installation)6.3.0
MicrosoftWindows Server 2012 (Server Core installation)6.2.0
MicrosoftWindows 8.16.3.0
MicrosoftWindows 10 Version 21H110.0.0
MicrosoftWindows 10 Version 180910.0.0
MicrosoftWindows Server 2012 R26.3.0
MicrosoftWindows 7 Service Pack 16.1.0
MicrosoftWindows Server 201910.0.0
MicrosoftWindows 10 Version 20H210.0.0
MicrosoftWindows 10 Version 200410.0.0
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)6.0.0
MicrosoftWindows Server 2016 (Server Core installation)10.0.0
MicrosoftWindows Server 201610.0.0

…and 6 more

Timeline

  • Sep 3, 2021 CVE Published
  • Jun 14, 2023 PoC Published
  • Sep 24, 2024 CVE Updated
  • Dec 24, 2024 PoC Published
  • Feb 6, 2025 PoC Published
  • Feb 13, 2025 PoC Published
  • Feb 23, 2025 PoC Published
  • Feb 23, 2025 PoC Published
  • Feb 2, 2026 PoC Published
  • Mar 19, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›