CVE-2021-31946 : Paint 3D Remote Code Execution Vulnerability

Paint 3D Remote Code Execution Vulnerability

Published 2021-06-08 23:15:09

Updated 2023-08-01 23:15:13

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2021-31946

Microsoft » Paint 3d » Version: N/A
cpe:2.3:a:microsoft:paint_3d:-:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

7.89%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
6.6	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L	1.8	4.7	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: Low Availability: Low
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	1.8	5.9	Microsoft Corporation
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31946

CVE-2021-31946 - Security Update Guide - Microsoft - Paint 3D Remote Code Execution Vulnerability
Patch;Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-671/

Third Party Advisory;VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-684/

ZDI-21-684 | Zero Day Initiative
Third Party Advisory;VDB Entry

Jump to