PT-2021-4436 · Microsoft · Windows+1

He Yisheng + 2 · Published 2021-10-12 · Updated 2023-08-01 · CVE-2021-41339

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft DWM Core Library (affected versions not specified)

Description The issue is related to errors in privilege management within the Microsoft DWM Core Library of the Windows operating system. It allows an attacker to elevate their privileges, potentially affecting the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Privilege Management

Weakness Enumeration

CWE-264

CWE-269

Related Identifiers

BDU:2021-05066

CVE-2021-41339

Affected Products

Dwm Core Library

Windows

References · 9

• https://bdu.fstec.ru/vul/2021-05066 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-41339 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41339 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41339 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41339 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41339 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-41339 · Vendor Advisory
• https://t.me/cibsecurity/30475 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021101228 · Note