CVE-2021-34486
Microsoft Windows Event Tracing Privilege Escalation Vulnerability
Published Aug 12, 2021 · updated Aug 10, 2026 · microsoft windows 10 1809
Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Aug 12, 2021 · Catalog
Detected
Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.
Mar 28, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 18, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Aug 10, 2026 · Catalog
Updated
Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.
Required action
Apply updates per vendor instructions.
CISA due date Apr 18, 2022
Affected
- cpe microsoft/windows 10 1809version unspecified
- cpe microsoft/windows 10 1909version unspecified
- cpe microsoft/windows 10 2004version unspecified
- cpe microsoft/windows 10 20h2version unspecified
- cpe microsoft/windows 10 21h1version unspecified
- cpe microsoft/windows server 2004version unspecified
- cpe microsoft/windows server 2019version unspecified
- cpe microsoft/windows server 20h2version unspecified
- vendor Microsoft Windowsversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2021-34486
Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.
cisa.gov - CVE.orgVulnerability recordCVE-2021-34486
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2021-34486
30-day exploitation probability 9.3%
first.org - NIST NVDVulnerability recordCVE-2021-34486
Windows Event Tracing Elevation of Privilege Vulnerability
nvd.nist.gov