High MSRC-CVE-2021-42286 1 CVE

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

Published Nov 9, 2021 · Updated Nov 9, 2021

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
10.0.19043.1348 — https://support.microsoft.com/help/5007186

Vulnerabilities 1

High 7.8

CVE-2021-42286

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 21H1 Windows

Nov 10, 2021

Revision history

2021-11-09 #1
Information published.

References

CVE-2021-42286 Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42286
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss