Microsoft Windows 10 Update Assistant vulnerabilities

4 CVEs affecting Microsoft Windows 10 Update Assistant, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-43211, published 2021-11-24.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-36945, published 2021-08-12. High severity, CVSS 7.3. EPSS: 1.9% chance of exploitation in the next 30 days. Windows 10 Update Assistant Elevation of Privilege Vulnerability
• CVE-2021-42297, published 2021-11-24. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. Windows 10 Update Assistant Elevation of Privilege Vulnerability
• CVE-2019-1378, published 2019-10-10. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system…
• CVE-2021-43211, published 2021-11-24. Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days. Windows 10 Update Assistant Elevation of Privilege Vulnerability