CVE-2021-38626
published 2021-09-15CVE-2021-38626: Windows Kernel Elevation of Privilege Vulnerability
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.53%
44.4th percentile
Windows Kernel Elevation of Privilege Vulnerability
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_server_2008_service_pack_2 | >= 6.0.6003.0 < 6.0.6003.21218 | 6.0.6003.21218 |
| msrc | windows_server_2008_for_32-bit_systems_service_pack_2 | — | — |
| msrc | windows_server_2008_for_x64-based_systems_service_pack_2 | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
vendor_msrc7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Microsoft Windows Server 2008 SP2 Kernel privileges management
vuldb·2026-08-13·CVSS 7.8
CVE-2021-38626 [HIGH] Microsoft Windows Server 2008 SP2 Kernel privileges management
A vulnerability, which was classified as critical, was found in Microsoft Windows Server 2008 SP2. This affects an unknown part of the component Kernel. The manipulation results in improper privilege management.
This vulnerability is identified as CVE-2021-38626. The attack can be executed remotely. There is not any exploit available.
It is best practice to apply a patch to resolve this issue.
GHSA
GHSA-qf8j-85x5-c3ww: Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38626
ghsa_unreviewed·2022-05-24·CVSS 7.8
CVE-2021-38625 [HIGH] CWE-269 GHSA-qf8j-85x5-c3ww: Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38626
Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38626.
GHSA
GHSA-pchq-9x38-f924: Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38625
ghsa_unreviewed·2022-05-24·CVSS 7.8
CVE-2021-38626 [HIGH] CWE-269 GHSA-pchq-9x38-f924: Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38625
Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38625.
Microsoft
Windows Kernel Elevation of Privilege Vulnerability
vendor_msrc·2021-09-14·CVSS 7.8
CVE-2021-38626 [HIGH] Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel: Windows Kernel
Microsoft: Microsoft
Impact: Elevation of Privilege
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005606
Reference: https://support.microsoft.com/help/5005606
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005618
Reference: https://support.microsoft.com/help/5005618
No detection rules found.
No public exploits indexed.
2021-09-15
Published