CVE-2021-33779

HighCVSS 8.1/10Last modified Aug 10, 2026

Description

Windows AD FS Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected software

VendorProductVersions
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.4530
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.4530
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.2061
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.2061
MicrosoftWindows Server version 2004>= 10.0.0, < 10.0.19041.1110
MicrosoftWindows Server version 20H2>= 10.0.0, < 10.0.19042.1110

References

Timeline

Published
Jul 14, 2021
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-33789.8FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFileCVE-2021-337808.8Windows DNS Server Remote Code Execution VulnerabilityCVE-2021-337818.1Azure AD Security Feature Bypass VulnerabilityCVE-2021-337825.5Windows Authenticode Spoofing VulnerabilityCVE-2021-337836.5Windows SMB Information Disclosure VulnerabilityCVE-2021-337847.8Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2021-337857.5Windows AF_UNIX Socket Provider Denial of Service VulnerabilityCVE-2021-337868.1Windows LSA Security Feature Bypass VulnerabilityCVE-2021-337887.5Windows LSA Denial of Service VulnerabilityCVE-2021-337909.8The RebornCore library before 4.7.3 allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as pCVE-2021-337927.8Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary.CVE-2021-337939.8Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during O
CVE-2021-33779: High severity, CVSS 8.1 | Vulnix