Skip to content
OpenAdvisories
High MSRC-CVE-2021-26887 1 CVE

Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability

Published Mar 9, 2021 · Updated Mar 15, 2021 · Revision 2

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

There are no Downloads listed in the Security Updates table. How do I protect my system from this vulnerability?
This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See Deploy Folder Redirection with Offline Files for instructions for configuring your system.

Security updates
6.2.9200.23298 — https://support.microsoft.com/help/5000847
Security Only — https://support.microsoft.com/help/5000840

Vulnerabilities 1

Revision history

  1. #2

    The instructions in the article, https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj649078(v%3dws.11), have been updated since this CVE was released on March 9, 2021. Microsoft recommends that customers re-visit the article ensure their systems are properly configured to be protected against this vulnerability. This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers.

  2. #1

    Information published.

References