CVE-2021-1679— Windows CryptoAPI Denial of Service Vulnerability

Quick assessment

Copy summary Copy citation

Affected

Microsoft Windows 10 Version 20H2

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows CryptoAPI是美国微软（Microsoft）公司的一个在Windows 操作系统中添加的密码编译机能。作为资料加密与解密功能的重要基础，CryptoAPI 支持同步，异步的密钥加密处理，以及操作系统中的数字证书 的管理工作。 Microsoft Windows CryptoAPI 拒绝服务漏洞,目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。以下产品及版本受到影响:Windows Server 2008 R2 for x64-based Systems

CVE-2021-1679 affects Microsoft Windows 10 Version 20H2. No confirmed in-the-wild exploitation; assess based on exposure. Microsoft Windows CryptoAPI是美国微软（Microsoft）公司的一个在Windows 操作系统中添加的密码编译机能。作为资料加密与解密功能的重要基础，CryptoAPI 支持同步，异步的密钥加密处理，以及操作系统中的数字证书 的管理工作。 Microsoft Windows CryptoAPI 拒绝服务漏洞,目前尚无此漏洞的相关信 CVE-2021-1679 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2021-1679

I. Basic Information for CVE-2021-1679

Affected Products

II. Public POCs for CVE-2021-1679

III. Intelligence Information for CVE-2021-1679

Vendor Advisories for CVE-2021-1679 (2)

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1679 x_refsource_MISC
• CVE-2021-1679 - Security Update Guide - Microsoft - Windows CryptoAPI Denial of Service Vulnerability vendor-advisory

• https://www.cve.org/CVERecord?id=CVE-2021-1679

Same Patch Batch · Microsoft · 2021-01-12 · 82 CVEs total

Showing top 20 of 82 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2021-1679