CVE-2021-43232

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Windows Event Tracing Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1809>= 10.0.0, < 10.0.17763.2366
MicrosoftWindows Server 2019>= 10.0.0, < 10.0.17763.2366
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.0, < 10.0.17763.2366
MicrosoftWindows 10 Version 1909>= 10.0.0, < 10.0.18363.1977
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.1415
MicrosoftWindows Server 2022>= 10.0.0, < 10.0.20348.405
MicrosoftWindows 10 Version 2004>= 10.0.0, < 10.0.19041.1415
MicrosoftWindows Server version 2004>= 10.0.0, < 10.0.19041.1415
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.1415
MicrosoftWindows Server version 20H2>= 10.0.0, < 10.0.19042.1415
MicrosoftWindows 11 version 21H2>= 10.0.0, < 10.0.22000.376
MicrosoftWindows 10 Version 21H2>= 10.0.0, < 10.0.19044.1415
MicrosoftWindows 10 Version 1507>= 10.0.0, < 10.0.10240.19145
MicrosoftWindows 10 Version 1607>= 10.0.0, < 10.0.14393.4825
MicrosoftWindows Server 2016>= 10.0.0, < 10.0.14393.4825
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.0, < 10.0.14393.4825
MicrosoftWindows 8.1>= 6.3.0, < 6.3.9600.20207
MicrosoftWindows Server 2012>= 6.2.0, < 6.2.9200.23545; >= 6.2.0, < 6.2.9200.23540
MicrosoftWindows Server 2012 (Server Core installation)>= 6.2.0, < 6.2.9200.23545; >= 6.2.0, < 6.2.9200.23540
MicrosoftWindows Server 2012 R2>= 6.3.0, < 6.3.9600.20207
MicrosoftWindows Server 2012 R2 (Server Core installation)>= 6.3.0, < 6.3.9600.20207

References

Timeline

Published
Dec 15, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-432337.5Remote Desktop Client Remote Code Execution VulnerabilityCVE-2021-432347.8Windows Fax Service Remote Code Execution VulnerabilityCVE-2021-432355.5Storage Spaces Controller Information Disclosure VulnerabilityCVE-2021-432367.5Microsoft Message Queuing Information Disclosure VulnerabilityCVE-2021-432377.3Windows Setup Elevation of Privilege VulnerabilityCVE-2021-432387.8Windows Remote Access Elevation of Privilege VulnerabilityCVE-2021-432397.8Windows Recovery Environment Agent Elevation of Privilege VulnerabilityCVE-2021-43246.5Insufficient policy enforcement in Google Update in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to read arbitrary files viCVE-2021-432407.8NTFS Set Short Name Elevation of Privilege VulnerabilityCVE-2021-432425.7Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-432435.5VP9 Video Extensions Information Disclosure VulnerabilityCVE-2021-432445.5Windows Kernel Information Disclosure Vulnerability
CVE-2021-43232: High severity, CVSS 7.8 | Vulnix