Permissions, Privileges, and Access Controls in Microsoft Windows and Windows Server - CVE-2021-33751

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions in the Storage Spaces Controller, which leads to security restrictions bypass and privilege escalation.

Affected software

How to mitigate CVE-2021-33751

Links to Public Exploits and PoC-codes

• Exploit #9051 - pwn2own2021_exploit (Exploit for CVE-2021_33751 used in PWN2OWN2021 by @synacktiv) (May 7, 2023)

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33751

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Storage Spaces Controller
• Multiple vulnerabilities in Dell EMC Unisphere for PowerMax and Dell EMC Solutions Enabler