Actively exploited in the wild
Microsoft Windows Event Tracing Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2022-03-28. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-34486
HighCVSS 7.8KEVExploitation Probability (EPSS)
Very high risk95th percentile - higher than 95% of all known CVEs
Summary
An elevation of privilege vulnerability in Windows Event Tracing.
Risk Assessment
An attacker could exploit this to gain elevated privileges, potentially allowing manipulation of event logs or privilege escalation.
Recommendation
Apply the security update released by Microsoft.
Other vulnerabilities in Windows Event Tracing
See all- CVE-2021-38630High
Elevation of privilege vulnerability in Windows Event Tracing. An attacker could exploit it to gain higher privileges on the system.
- CVE-2021-36964High
Vulnerability in Windows Event Tracing allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-26425High
Elevation of Privilege vulnerability in Windows Event Tracing. Allows an attacker to gain higher privileges.
- CVE-2021-26898High
An elevation of privilege vulnerability exists in Windows Event Tracing. The description lacks technical details, but the vulnerability could allow an attacker to gain elevated privileges on the system.
- CVE-2021-26872High
Elevation of privilege vulnerability in Windows Event Tracing.
- CVE-2021-24107Medium
Information disclosure vulnerability in Windows Event Tracing.
Original NVD description (English source)
Windows Event Tracing Elevation of Privilege Vulnerability