CVE-2021-41371

—

CVSS 3.1

4.4 medium

EPSS

2%p75

Published

Nov 10, 2021 (Nov 10, 2021)

Modified

Aug 19, 2026

Description

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Vendors: microsoft
Products: windows 10, windows 11, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news3 stories

Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0

The Hacker NewsNov 10, 06:24 UTC · Nov 10, 2021Vulnerability in the wildCVE-2021-42321 CVE-2021-42292 CVE-2021-43208+16 CVEs

60

Microsoft Patch Tuesday, November 2021 Edition

Krebs on SecurityNov 10, 01:43 UTC · Nov 10, 2021Vulnerability in the wildCVE-2021-42292 CVE-2021-42321 CVE-2021-38631+2 CVEs

60

Microsoft Patch Tuesday security updates for November 2021 fix 2 Zero

Security AffairsNov 9, 20:24 UTC · Nov 9, 2021Vulnerability in the wildCVE-2021-42321 CVE-2021-38631 CVE-2021-41371+2 CVEs

60