The remote Windows host is missing security update 5000808.
It is, therefore, affected by multiple vulnerabilities :

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-1640, CVE-2021-1729, CVE-2021-24090,     CVE-2021-24095, CVE-2021-26860, CVE-2021-26862,     CVE-2021-26863, CVE-2021-26864, CVE-2021-26865,     CVE-2021-26866, CVE-2021-26868, CVE-2021-26870,     CVE-2021-26871, CVE-2021-26872, CVE-2021-26873,     CVE-2021-26874, CVE-2021-26875, CVE-2021-26878,     CVE-2021-26880, CVE-2021-26882, CVE-2021-26885,     CVE-2021-26889, CVE-2021-26891, CVE-2021-26898,     CVE-2021-26899, CVE-2021-26900, CVE-2021-26901,     CVE-2021-27077)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-24107, CVE-2021-26869,     CVE-2021-26884)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-26861,     CVE-2021-26867, CVE-2021-26876, CVE-2021-26881,     CVE-2021-26890, CVE-2021-27085)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-26879,     CVE-2021-26886)

  - An memory corruption vulnerability exists. An attacker     can exploit this to corrupt the memory and cause     unexpected behaviors within the system/application.
    (CVE-2021-26411)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2021-26892)

Detections

Analytics

KB5000808: Windows 10 Version 1909 March 2021 Security Update

high Nessus Plugin ID 147220

Version 1.21

Version 1.20

Version 1.19

Version 1.18

Version 1.18

Version 1.17

Version 1.16

Version 1.21 Nov 29, 2024, 9:42 AM CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSSv3 score source (changed from "CVE-2021-26867" to "CVE-2021-27085") Plugin Feed: 202411290942
Version 1.20 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.19 Jan 16, 2024, 3:43 PM CVSS metrics ("CVSSv3 score" set to 9.9. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H") CVSSv3 score source (changed from "CVE-2021-26881" to "CVE-2021-26867") Plugin Feed: 202401161543
Version 1.18 Feb 3, 2023, 4:05 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202302031605
Version 1.18 Jan 16, 2024, 1:47 PM CVSS metrics ("CVSSv3 score" set to 9.9) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H") CVSSv3 score source (changed from "CVE-2021-26881" to "CVE-2021-26867") Plugin Feed: 202401161347
Version 1.17 Dec 6, 2022, 6:53 AM Reference Plugin Feed: 202212060653
Version 1.16 Nov 21, 2022, 10:22 PM CISA reference IAVM reference Plugin Feed: 202211212222