CVE-2021-41377

HighCVSS 7.8/10Last modified Aug 19, 2026

Description

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Nov 10, 2021
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-413787.8Windows NTFS Remote Code Execution VulnerabilityCVE-2021-413795.5Windows Installer Elevation of Privilege VulnerabilityCVE-2021-41385.3Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname.CVE-2021-413806.5RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service (application crash) via crafted RFB protocol data. NOTE: It iCVE-2021-413817.5Payara Micro Community 5.2021.6 and below allows Directory Traversal.CVE-2021-413827.5Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface.CVE-2021-413837.2setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands via shell metacharacters in the ntp_server fCVE-2021-413856.5The third party intelligence connector in Securonix SNYPR 6.3.1 Build 184295_0302 allows an authenticated user to obtain access to server coCVE-2021-413878.8seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root.CVE-2021-413887.8Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc pCVE-2021-41399.0pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2021-413908.0In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Inj