CVE-2021-34458

CriticalCVSS 9.9/10Last modified Aug 10, 2026

Description

Windows Kernel Remote Code Execution Vulnerability

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.4530
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.4530
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.2061
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.2061
MicrosoftWindows Server version 2004>= 10.0.0, < 10.0.19041.1110
MicrosoftWindows Server version 20H2>= 10.0.0, < 10.0.19042.1110

References

Timeline

Published
Jul 16, 2021
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-344597.8Windows AppContainer Elevation Of Privilege VulnerabilityCVE-2021-34465.5A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability relateCVE-2021-344607.8Windows Storage Spaces Controller Elevation of Privilege VulnerabilityCVE-2021-344617.8Windows Container Isolation FS Filter Driver Elevation of Privilege VulnerabilityCVE-2021-344627.0Windows AppX Deployment Extensions Elevation of Privilege VulnerabilityCVE-2021-344647.8Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-344665.7Windows Hello Security Feature Bypass VulnerabilityCVE-2021-344677.1Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-344687.1Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-344698.2Microsoft Office Security Feature Bypass VulnerabilityCVE-2021-34475.5A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on maCVE-2021-344708.0Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-34458: Critical severity, CVSS 9.9 | Vulnix