CVE-2021-31199

Microsoft Enhanced Cryptographic Provider privilege escalation vulnerability (CVE-2021-31199) was actively exploited in the wild, allowing attackers to escalate privileges on affected systems.

This vulnerability in the Microsoft Enhanced Cryptographic Provider allows attackers to escalate privileges without requiring remote code execution, making it a significant threat to systems relying on this component. DIB organizations must ensure all Microsoft patches are applied promptly, as this CVE was listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, indicating active exploitation. Failure to patch can lead to unauthorized access and data compromise, impacting compliance with NIST 800-171 requirements for vulnerability management.

Shame score — A known privilege escalation vulnerability in a core Microsoft component was actively exploited in the wild, demonstrating a failure to patch a critical flaw before it was weaponized.