Windows Common Log File System Driver Information Disclosure Vulnerability
CVE-2021-43224

5.5MEDIUM

Key Information:

Vendor: Microsoft
Status: Windows 10 Version 1809; Windows Server 2019; Windows Server 2019 (server Core Installation); Windows 10 Version 1909
Vendor: CVE Published:; 15 December 2021

🔔 Create Microsoft Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2021-43224?

Windows Common Log File System Driver Information Disclosure Vulnerability

Affected Version(s)

Windows 10 Version 1507 32-bit Systems 10.0.0 < 10.0.10240.19145

Windows 10 Version 1607 32-bit Systems 10.0.0 < 10.0.14393.4825

Windows 10 Version 1809 32-bit Systems 10.0.0 < 10.0.17763.2366

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2021-43224-POC
Created by KaLendsi

References

https://portal.msrc.microsoft.com/en-US/security-guidance...

x_refsource_MISC

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

🟡
Public PoC available
Dec 21, 2021
👾
Exploit known to exist
Dec 21, 2021
Vulnerability published
Dec 15, 2021
Vulnerability Reserved
Nov 2, 2021

CVE-2021-43224 Data

JSON