Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
Security updates
10.0.17763.2183 — https://support.microsoft.com/help/5005568
10.0.18363.1801 — https://support.microsoft.com/help/5005566
10.0.19043.1237 — https://support.microsoft.com/help/5005565
10.0.20348.230 — https://support.microsoft.com/help/5005575
10.0.10240.19060 — https://support.microsoft.com/help/5005569
10.0.14393.4651 — https://support.microsoft.com/help/5005573
Vulnerabilities 1
-
High 7.8
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
Revision history
-
#2
For all CVEs affecting Windows that were released on September 14, 2021: 1) In the Security Updates table, the Build Numbers for KB KB5005565 have been corrected for all affected editions of the following versions of Windows 10: Windows 10, version 2004, all editions; Windows Server, version 2004 (Server Core installation); Windows 10, version 20H2; Windows Server, version 20H2 (Server Core Installation); Windows 10, version 21H1. 2) For CVEs where Windows Server 2022 is affected the links have been updated to point to information related to [5005575](https://support.microsoft.com/en-us/help/5005575). Customers whose Windows devices are configured to receive automatic updates do not need to take any further action.
-
#1
Information published.
References
-
CVE-2021-36973 Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36973
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss