CVE-2021-38624

MediumCVSS 6.5

Published: 15/09/2021(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.42%

70th percentile - higher than 70% of all known CVEs

Summary

A security feature bypass vulnerability in Windows Key Storage Provider allows an attacker to bypass key protection mechanisms. This could lead to unauthorized access to cryptographic keys and protected data.

Risk Assessment

The risk includes potential compromise of cryptographic data integrity and confidentiality, potentially leading to identity and data theft.

Recommendation

It is recommended to apply Windows security updates and review key management policies.

Original NVD description (English source)

Windows Key Storage Provider Security Feature Bypass Vulnerability