CVE-2021-31979

An unpatched Windows kernel privilege escalation vulnerability was actively exploited in the wild, allowing attackers to escalate privileges without remote code execution.

This unpatched kernel vulnerability (CVE-2021-31979) was listed in CISA's KEV catalog, indicating active exploitation. For DIB organizations, this means systems running unpatched Windows are at risk of privilege escalation, which can lead to data exfiltration or lateral movement. The key takeaway is to ensure all Windows systems are patched promptly and monitor for signs of exploitation.

Shame score — The vulnerability was unpatched and actively exploited in the wild, demonstrating a failure to patch known vulnerabilities and leaving systems vulnerable to attackers.