Skip to content
COOEY

EXPOSURES › CVE-2021-31955

CVE-2021-31955

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2021-11-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-31955 ↗
⌖ EXPLOITED IN THE WILD SHAME 65/100 exploited-in-wildunpatched

A Windows kernel vulnerability allowed attackers to read kernel memory from user mode, exposing sensitive data.

This kernel information disclosure flaw let adversaries access protected memory, potentially leaking credentials or secrets. DIBs must ensure rapid patching of Windows systems and monitor for memory-dumping malware. The failure is avoidable through timely updates and highlights the risk of unpatched OS vulnerabilities.

Shame score — A known kernel vulnerability was actively exploited in the wild, indicating a failure to patch or defend against a critical flaw.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.80
Critical kernel vulnerability with high risk of information disclosure
cooey ↗ severe-fallout -0.80
Critical kernel vulnerability with high risk of information disclosure
"Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process."
AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized