CVE-2021-24082
vulnerability analysis and mitigation

Overview

A security vulnerability identified as CVE-2021-24082 was discovered in the Microsoft.PowerShell.Utility Module, specifically related to Windows Defender Application Control (WDAC) Security Feature Bypass. The vulnerability was disclosed on January 13, 2021, and affects Microsoft PowerShell utility modules (CVE Mitre).

Technical details

The vulnerability is classified as a Security Feature Bypass in the Microsoft.PowerShell.Utility Module, which could potentially allow attackers to bypass Windows Defender Application Control (WDAC) security features. The vulnerability was assigned a severity rating of 4 out of 10 (Rapid7).

Impact

The vulnerability could potentially allow attackers to bypass security features in Windows Defender Application Control, which could compromise system security and potentially lead to unauthorized access or execution of code (CVE Mitre).

Exploitability

As of February 2021, there were no known exploits of this vulnerability in the wild (SonicWall Blog).

Mitigation and workarounds

Microsoft has released security updates to address this vulnerability. Users are advised to apply the appropriate security patches through Windows Update to mitigate this security risk (MSRC Portal).

Additional resources


SourceThis report was generated using AI

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management