MEDIUM
CVE-2021-31955
CVSS
5.5
KEV
Description
Windows Kernel Information Disclosure Vulnerability
Summary dbcve.org
This is a Windows Kernel information disclosure vulnerability that allows an authenticated attacker to potentially read sensitive kernel memory contents. The vulnerability is in the Windows kernel component and could be used to gather information for further exploitation or to expose sensitive system data.
Mitigation
Apply the Microsoft security updates released for June 2021 that address this kernel vulnerability. Prioritize patching for systems exposed to the internet or handling sensitive data.
Weakness (CWE)
CWE-497
EPSS Score
81.11%
Probability of exploitation in next 30 days
99.6th percentile
References
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.