Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:o:microsoft:windows_10_2004:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Microsoft Windows: http.sys use-after-free remote code execution (CVE-2021-31166)

A public proof-of-concept exploit for CVE-2021-31166, a use-after-free vulnerability in the Windows http.sys driver, demonstrates remote code execution via a malformed Accept-Encoding header.

Windows 10 2004 +3 windows rce vulnerability http-protocol-stack
1r 1t 1c
high advisory

Potential Privilege Escalation via InstallerFileTakeOver (CVE-2021-41379)

This rule detects potential exploitation of the InstallerTakeOver vulnerability (CVE-2021-41379), where successful exploitation allows an unprivileged user to escalate privileges to SYSTEM.

Edge privilege-escalation cve-2021-41379 windows
2r 1t 1c