Vulnerability identifier: #VU50460

Vulnerability risk: Medium

CVSSv3.1: 6.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C]

CVE-ID: CVE-2021-24086

CWE-ID: CWE-20

Exploitation vector: Network

Exploits in database: 2

• November 29, 2021
  • CVE-2021-24086-exp () [Github]
• May 18, 2021
  • CVE-2021-24086 (Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.) [Github]

Impact: Denial of service

Vulnerable software:
Windows
Operating systems & Components / Operating system
Windows Server
Operating systems & Components / Operating system

Vendor: Microsoft