CVE Catalog
Actively exploited in the wild
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
Microsoft - Enhanced Cryptographic Provider · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-31199
MediumCVSS 5.2KEVSummary
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability.
Risk Assessment
An attacker can elevate privileges on the system, potentially leading to full system compromise.
Recommendation
Apply Microsoft security updates for Enhanced Cryptographic Provider.
Other vulnerabilities in Microsoft Enhanced Cryptographic Provider
Original NVD description (English source)
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability