Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows
Date added (CISA)
2021-11-03
Remediation due
2022-05-03
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code with elevated privileges.