CVE-2021-43244

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Windows Kernel Information Disclosure Vulnerability

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1809>= 10.0.0, < 10.0.17763.2366
MicrosoftWindows Server 2019>= 10.0.0, < 10.0.17763.2366
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.0, < 10.0.17763.2366
MicrosoftWindows 10 Version 1909>= 10.0.0, < 10.0.18363.1977
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.1415
MicrosoftWindows Server 2022>= 10.0.0, < 10.0.20348.405
MicrosoftWindows 10 Version 2004>= 10.0.0, < 10.0.19041.1415
MicrosoftWindows Server version 2004>= 10.0.0, < 10.0.19041.1415
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.1415
MicrosoftWindows Server version 20H2>= 10.0.0, < 10.0.19042.1415
MicrosoftWindows 10 Version 21H2>= 10.0.0, < 10.0.19044.1415

References

Timeline

Published
Dec 15, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-432457.8Windows Digital TV Tuner Elevation of Privilege VulnerabilityCVE-2021-432465.6Windows Hyper-V Denial of Service VulnerabilityCVE-2021-432477.8Windows TCP/IP Driver Elevation of Privilege VulnerabilityCVE-2021-432487.8Windows Digital Media Receiver Elevation of Privilege VulnerabilityCVE-2021-43256.1A vulnerability, which was classified as problematic, has been found in NHN TOAST UI Chart 4.1.4. This issue affects some unknown processingCVE-2021-432555.5Microsoft Office Trust Center Spoofing VulnerabilityCVE-2021-432567.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-432577.8Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain CVE-2021-432588.8CartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. This requires authenticated accCVE-2021-43267.8A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands via plugin install/CVE-2021-432643.3In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows attackers to bypass the CVE-2021-432655.4In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, certain tag syntax could be used for XSS, such as via a SCRIPT element.
CVE-2021-43244: Medium severity, CVSS 5.5 | Vulnix