Cyber threats / Vulnerabilities

CVE-2021-31201

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
2.6%
EPSS
86%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

Vendor
Microsoft
Product
Enhanced Cryptographic Provider
Added to KEV
Nov 3, 2021
Remediation due
Nov 17, 2021 (US federal deadline)
Ransomware use
Not known
EPSS
2.6% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded
References