CVE-2021-31969

HIGH

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS v3.1 Score

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 6/8/2021Modified: 11/21/2024

Related Intelligence (1)

CRITICALApt

When IT Support Calls: Dissecting a ModeloRAT Campaign from Teams to Domain Compromise

Overview Attackers do not need to break into the front door when they can convince employees to open it for them through the tools they already trust. In April 2026, Rapid7 investigated an enterprise intrusion that began with a Microsoft Teams message from a fake “IT Support” account and quickly escalated into a full compromise chain involving malware deployment, privilege escalation, credential t

CVE-2023-36036CVE-2021-31969
Rapid7

References (4)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31969PatchVendor Advisoryhttps://www.zerodayinitiative.com/advisories/ZDI-21-797/Third Party AdvisoryVDB Entryhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31969PatchVendor Advisoryhttps://www.zerodayinitiative.com/advisories/ZDI-21-797/Third Party AdvisoryVDB Entry