CVE-2021-27091: RPC Endpoint Mapper Service Elevation of Privilege Vulnerability

Overview

Severity

High (CVSS 7.8)

CVSS Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Category

Elevation of Privilege

Exploit Status

Not Exploited

Exploitation Likelihood

Less Likely

Publicly Disclosed

Yes

Patch Tuesday

2021-Apr

Released

2021-04-13

EPSS Score

0.43% (percentile: 62.6%)

Affected Products (6)

ESU

• Windows 7 for 32-bit Systems Service Pack 1
• Windows 7 for x64-based Systems Service Pack 1
• Windows Server 2008 R2 for x64-based Systems Service Pack 1
• Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows

• Windows Server 2012
• Windows Server 2012 (Server Core installation)

Security Updates (4)

• 5001335
• 5001392
• 5001387
• 5001383

Revision History

• 2021-04-13: Information published.