ID:6901 - Exploit for Improper Privilege Management in Windows and Windows Server - CVE-2021-31955

Link to public exploit:

Vulnerability description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to improper privilege management. A local unprivileged user can read contents of Kernel memory from a user mode process.

Note, the vulnerability is being actively exploited in the wild.

Remediation