Windows Event Tracing Elevation of Privilege Vulnerability

The remote Windows host is missing security update 5005030.
It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-26424,     CVE-2021-26432, CVE-2021-34530, CVE-2021-34533,     CVE-2021-34534, CVE-2021-34535, CVE-2021-36936,     CVE-2021-36937, CVE-2021-36947)

  - A session spoofing vulnerability exists. An attacker can     exploit this to perform actions with the privileges of     another user. (CVE-2021-36942)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-26425, CVE-2021-26426, CVE-2021-34483,     CVE-2021-34484, CVE-2021-34486, CVE-2021-34487,     CVE-2021-34536, CVE-2021-34537, CVE-2021-36948)

  - An memory corruption vulnerability exists. An attacker     can exploit this to corrupt the memory and cause     unexpected behaviors within the system/application.
    (CVE-2021-34480)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-26433, CVE-2021-36926,     CVE-2021-36932, CVE-2021-36933, CVE-2021-36938)

The remote Windows host is missing security update 5005033.
It is, therefore, affected by multiple vulnerabilities :

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-26425, CVE-2021-26426, CVE-2021-26431,     CVE-2021-34483, CVE-2021-34484, CVE-2021-34486,     CVE-2021-34487, CVE-2021-34536, CVE-2021-34537,     CVE-2021-36948)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-26424,     CVE-2021-26432, CVE-2021-34530, CVE-2021-34533,     CVE-2021-34534, CVE-2021-34535, CVE-2021-36936,     CVE-2021-36937, CVE-2021-36947)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-26433, CVE-2021-36926,     CVE-2021-36932, CVE-2021-36933)

  - An memory corruption vulnerability exists. An attacker     can exploit this to corrupt the memory and cause     unexpected behaviors within the system/application.
    (CVE-2021-34480)

The remote Windows host is missing security update 5005031.
It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-26424,     CVE-2021-26432, CVE-2021-34530, CVE-2021-34533,     CVE-2021-34534, CVE-2021-34535, CVE-2021-36936,     CVE-2021-36937, CVE-2021-36947)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-26425, CVE-2021-26426, CVE-2021-34483,     CVE-2021-34484, CVE-2021-34486, CVE-2021-34487,     CVE-2021-34536, CVE-2021-34537, CVE-2021-36948)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-26433, CVE-2021-36926,     CVE-2021-36932, CVE-2021-36933)

  - An memory corruption vulnerability exists. An attacker     can exploit this to corrupt the memory and cause     unexpected behaviors within the system/application.
    (CVE-2021-34480)

ID	Name	Product	Family	Severity
152435	KB5005030: Windows 10 Version 1809 and Windows Server 2019 Security Update (August 2021)	Nessus	Windows : Microsoft Bulletins	critical
152431	KB5005033: Windows 10 Version 2004 / Windows 10 Version 20H2 / Windows 10 Version 21H1 Security Update (August 2021)	Nessus	Windows : Microsoft Bulletins	critical
152430	KB5005031: Windows 10 Version 1909 Security Update (August 2021)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2021-34486

high

Tenable Plugins

critical

critical

critical