CVE-2021-38625
published 2021-09-15CVE-2021-38625: Windows Kernel Elevation of Privilege Vulnerability
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.53%
44.4th percentile
Windows Kernel Elevation of Privilege Vulnerability
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_server_2008_service_pack_2 | >= 6.0.6003.0 < 6.0.6003.21218 | 6.0.6003.21218 |
| msrc | windows_server_2008_for_32-bit_systems_service_pack_2 | — | — |
| msrc | windows_server_2008_for_x64-based_systems_service_pack_2 | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
vendor_msrc7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Microsoft Windows 2008 SP2 Kernel privileges management
vuldb·2026-08-13·CVSS 7.8
CVE-2021-38625 [HIGH] Microsoft Windows 2008 SP2 Kernel privileges management
A vulnerability, which was classified as critical, has been found in Microsoft Windows 2008 SP2. Affected by this issue is some unknown functionality of the component Kernel. The manipulation leads to improper privilege management.
This vulnerability is referenced as CVE-2021-38625. Remote exploitation of the attack is possible. No exploit is available.
Applying a patch is the recommended action to fix this issue.
GHSA
GHSA-qf8j-85x5-c3ww: Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38626
ghsa_unreviewed·2022-05-24·CVSS 7.8
CVE-2021-38625 [HIGH] CWE-269 GHSA-qf8j-85x5-c3ww: Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38626
Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38626.
GHSA
GHSA-pchq-9x38-f924: Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38625
ghsa_unreviewed·2022-05-24·CVSS 7.8
CVE-2021-38626 [HIGH] CWE-269 GHSA-pchq-9x38-f924: Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38625
Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38625.
Microsoft
Windows Kernel Elevation of Privilege Vulnerability
vendor_msrc·2021-09-14·CVSS 7.8
CVE-2021-38625 [HIGH] Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel: Windows Kernel
Microsoft: Microsoft
Impact: Elevation of Privilege
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005606
Reference: https://support.microsoft.com/help/5005606
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005618
Reference: https://support.microsoft.com/help/5005618
No detection rules found.
No public exploits indexed.
2021-09-15
Published