Skip to content

CVE-20XX-?

agent?

CVE-2021-31201

5.2 MEDIUM 3% exploit odds exploited in the wild Fix listed Other OS & kernel

What it is

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

At a glance

Exploitability: Can be exploited locally on the machine with a low-privilege account. Limited direct impact.
In the wild: CISA lists this as exploited in real attacks. Treat as urgent.
Fix: A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

2021-04-14 00:00 UTC ReservedThe CVE id was reserved by its CNA
2021-06-08 23:15 UTC PublishedDisclosed publicly on CVE.org and NVD
2021-11-03 Exploited in the wildAdded to CISA's Known Exploited Vulnerabilities list
2021-11-17 Remediation deadlineCISA's due date for federal agencies to fix it
2026-06-17 03:51 UTC Last updatedMost recent change to the record

Why it ranks here

Exploited in the wild: yes, CISA lists it. This puts it above everything that is not.
Exploit odds: 2.6% in the next 30 days (EPSS).
Severity: 5.2 MEDIUM (CVSS).
Fix: a patch or advisory is linked.

Details

Published: 2021-06-08 23:15 UTC
Last modified: 2026-06-17 03:51 UTC
Added to CISA KEV: 2021-11-03
Exploit probability: 2.6% · EPSS, next 30 days
Record status: Analyzed

Affected

Microsoft Windows 10 1507 < 10.0.10240.18967
Microsoft Windows 10 1607 < 10.0.14393.4467
Microsoft Windows 10 1809 < 10.0.17763.1999
Microsoft Windows 10 1909 < 10.0.18363.1621
Microsoft Windows 10 2004 < 10.0.19041.1052
Microsoft Windows 10 20h2 < 10.0.19042.1052
Microsoft Windows 10 21h1 < 10.0.19043.1052
Microsoft Windows 7

Attack profile CVSS 3.1 · 5.2

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None
Scope: Changed
Confidentiality: Low
Integrity: Low
Availability: None

Raw vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Is it in your code?

Hand this to your coding agent. It searches your project for the affected products and checks versions. Nothing leaves your machine.

Read https://cve-list.com/agent/cve/CVE-2021-31201.md and follow it. Check whether this project is affected by CVE-2021-31201. Read only. Don't change anything and don't upload my code. Tell me yes, no or not sure, with the file as proof.

· More options · Status badge

Meme: I wake up, CVE-2021-31201

Download Square Reddit

Fix and advisories

References

NVD record · CVE.org record