CVE-2021-26889
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
Elevation of privilege vulnerability in Windows Update Stack. Allows an attacker to gain elevated privileges.
Risk Assessment
An attacker could gain unauthorized access to the system and its resources.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows Update Stack
See all- CVE-2021-1729High
Elevation of privilege vulnerability in Windows Update Stack Setup. An attacker could exploit it to gain elevated privileges on the system.
- CVE-2020-1110High
An elevation of privilege vulnerability in Windows Update Stack due to improper handling of objects in memory. An attacker could run arbitrary code in kernel mode, install programs, view, change or delete data, or create new accounts with full user rights.
- CVE-2020-1109High
Elevation of privilege vulnerability in Windows Update Stack. An attacker who logs on can run a specially crafted application to execute code in kernel mode, allowing installation of programs, data modification, or creation of accounts with full user rights.
Original NVD description (English source)
Windows Update Stack Elevation of Privilege Vulnerability