CVE-2021-24092

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Microsoft Defender Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

VendorProductVersions
MicrosoftMicrosoft Endpoint ProtectionN/A
MicrosoftMicrosoft System Center Endpoint ProtectionN/A
MicrosoftMicrosoft System Center 2012 R2 Endpoint ProtectionN/A
MicrosoftMicrosoft Security EssentialsN/A
MicrosoftMicrosoft System Center 2012 Endpoint ProtectionN/A
MicrosoftWindows DefenderN/A

References

Timeline

Published
Feb 25, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-240938.8Windows Graphics Component Remote Code Execution VulnerabilityCVE-2021-240949.8Windows TCP/IP Remote Code Execution VulnerabilityCVE-2021-240957.0DirectX Elevation of Privilege VulnerabilityCVE-2021-240967.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2021-240985.5Windows Console Driver Denial of Service VulnerabilityCVE-2021-240996.5Skype for Business and Lync Denial of Service VulnerabilityCVE-2021-24104.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 anCVE-2021-241005.0Microsoft Edge for Android Information Disclosure VulnerabilityCVE-2021-241016.5Microsoft Dataverse Information Disclosure VulnerabilityCVE-2021-241027.8Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-241037.8Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-241044.6Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-24092: High severity, CVSS 7.8 | Vulnix