CVE-2021-34484

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Aug 10, 2026

Description

Windows User Profile Service Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2021
Last modified
Aug 10, 2026
Added to CISA KEV
Mar 31, 2022
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-344855.0.NET Core and Visual Studio Information Disclosure VulnerabilityCVE-2021-344867.8Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-344877.0Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-344887.8Windows Console Driver Elevation of Privilege VulnerabilityCVE-2021-344897.8DirectWrite Remote Code Execution VulnerabilityCVE-2021-34495.9An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClCVE-2021-344907.5Windows TCP/IP Driver Denial of Service VulnerabilityCVE-2021-344915.5Win32k Information Disclosure VulnerabilityCVE-2021-344928.1Windows Certificate Spoofing VulnerabilityCVE-2021-344936.7Windows Partition Management Driver Elevation of Privilege VulnerabilityCVE-2021-344948.8Windows DNS Server Remote Code Execution VulnerabilityCVE-2021-344965.5Windows GDI Information Disclosure Vulnerability