CVE

CVE-2021-31199

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft · Enhanced Cryptographic Provider

Date added (CISA)

2021-11-03

Remediation due

2021-11-17

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.