CVE-2021-34456
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
A vulnerability in the Windows Remote Access Connection Manager allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Risk Assessment
Risk of unauthorized network access and system takeover.
Recommendation
Install the latest Windows security updates to mitigate this vulnerability.
Other vulnerabilities in Windows Remote Access Connection Manager
See all- CVE-2026-62783High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-62758High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-50666High
Windows Remote Access Connection Manager has a use-after-free vulnerability that allows an authorized attacker to elevate privileges over a network.
- CVE-2024-38240High
Elevation of privilege vulnerability in Windows Remote Access Connection Manager. Allows an attacker to gain higher privileges on the system.
- CVE-2024-30069Medium
A vulnerability in Windows Remote Access Connection Manager could lead to information disclosure. An attacker may exploit this flaw to access sensitive data stored on the system.
- CVE-2021-34457Medium
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
- CVE-2021-34454Medium
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
- CVE-2021-34445High
Elevation of privilege vulnerability in the Windows Remote Access Connection Manager. It allows a local attacker to gain elevated privileges.
- CVE-2021-33773High
Elevation of privilege vulnerability in the Windows Remote Access Connection Manager. It allows a local attacker to gain elevated privileges.
- CVE-2021-33763Medium
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
Original NVD description (English source)
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability