CVE-2021-38637

MediumCVSS 5.5/10Last modified Aug 10, 2026

Description

Windows Storage Information Disclosure Vulnerability

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.2183
MicrosoftWindows 10 Version 1809>= 10.0.0, < 10.0.17763.2183
MicrosoftWindows 10 Version 1909>= 10.0.0, < 10.0.18363.1801
MicrosoftWindows 10 Version 2004>= 10.0.0, < 10.0.19041.1237
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.1237
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.1237
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.2183
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.2183
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.230
MicrosoftWindows Server version 2004>= 10.0.0, < 10.0.19041.1237
MicrosoftWindows Server version 20H2>= 10.0.0, < 10.0.19042.1237

References

Timeline

Published
Sep 15, 2021
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-386387.8Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2021-386397.8Win32k Elevation of Privilege VulnerabilityCVE-2021-38647.0A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is aCVE-2021-386416.1Microsoft Edge for Android Spoofing VulnerabilityCVE-2021-386426.1Microsoft Edge for iOS Spoofing VulnerabilityCVE-2021-386447.8Microsoft MPEG-2 Video Extension Remote Code Execution VulnerabilityCVE-2021-386457.8Open Management Infrastructure Elevation of Privilege VulnerabilityCVE-2021-386467.8Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityCVE-2021-386479.8Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityCVE-2021-386487.8Open Management Infrastructure Elevation of Privilege VulnerabilityCVE-2021-386497.0Open Management Infrastructure Elevation of Privilege VulnerabilityCVE-2021-386507.6Microsoft Office Spoofing Vulnerability
CVE-2021-38637: Medium severity, CVSS 5.5 | Vulnix