Security Vulnerabilities - CVEs Published In March 2021
Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.004
Published
2021-03-11
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.204
Published
2021-03-11
Storage Spaces Controller Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.005
Published
2021-03-11
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVSS Score
7.5
EPSS Score
0.061
Published
2021-03-11
Remote Access API Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.065
Published
2021-03-11
Windows Media Photo Codec Information Disclosure Vulnerability
CVSS Score
5.5
EPSS Score
0.004
Published
2021-03-11
Windows WalletService Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.317
Published
2021-03-11
User Profile Service Denial of Service Vulnerability
CVSS Score
6.1
EPSS Score
0.002
Published
2021-03-11
<p>An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting another user's personal data to a created folder.</p>
<p>To exploit the vulnerability, an attacker can create a new folder under the Folder Redirection root path and create a junction on a newly created User folder. When the new user logs in, Folder Redirection would start redirecting to the folder and copying personal data.</p>
<p>This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See the <strong>FAQ</strong> section of this CVE for configuration guidance.</p>
CVSS Score
7.8
EPSS Score
0.005
Published
2021-03-11
Windows Update Stack Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.007
Published
2021-03-11