CVE-2021-31199

Deeper analysis

Microsoft Enhanced Cryptographic Provider contains an elevation of privilege vulnerability tracked as CVE-2021-31199. The flaw resides in this cryptographic component supplied with multiple versions of Microsoft Windows and carries a CVSS 3.1 score of 5.2 reflecting local attack vector, low complexity, and low privileges required.

A local attacker who already possesses a low-privileged account on an affected system can exploit the weakness without user interaction. Successful exploitation allows the attacker to obtain limited elevation of privilege that crosses security boundaries, resulting in partial disclosure and modification of information while leaving availability unaffected.

Microsoft’s Security Response Center advisory supplies official mitigation guidance and patches, while the presence of the CVE in CISA’s Known Exploited Vulnerabilities catalog confirms that the issue has been observed in active exploitation campaigns.