Summary
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
How do I know if I'm affected by this vulnerability?
This issue allows a single root input/output virtualization (SR-IOV) device which is assigned to a guest to potentially interfere with its Peripheral Component Interface Express (PCIe) siblings which are attached to other guests or to the root.
You will be vulnerable if you implement the following:
Your Windows instance is hosting virtual machines
Your Server includes the required hardware with SR-IOV devices
Security updates
10.0.17763.2061 — https://support.microsoft.com/help/5004244
10.0.19041.1110 — https://support.microsoft.com/help/5004237
10.0.14393.4530 — https://support.microsoft.com/help/5004238
Vulnerabilities 1
-
Critical 9.9
Windows Kernel Remote Code Execution Vulnerability
Windows Kernel Remote Code Execution Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2021-34458 Windows Kernel Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34458
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss