CVE-2021-26871: 
vulnerability analysis and mitigation

CVE-2021-26871 is a Windows WalletService Elevation of Privilege Vulnerability that was disclosed in March 2021. The vulnerability affects multiple versions of Microsoft Windows 10, including versions 1507, 1607, 1803, 1809, 1909, 2004, and 20H2 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that it requires local access with low attack complexity and privileges to exploit. The CVSS v2.0 base score is 4.6 (MEDIUM) with vector (AV:L/AC:L/Au:N/C:P/I:P/A:P) (NVD).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on affected Windows systems, potentially leading to full system compromise with high impacts on confidentiality, integrity, and availability (NVD).

The vulnerability requires local access to exploit, meaning an attacker would need prior access to the target system. The attack complexity is considered low, suggesting that once an attacker has the necessary access, the vulnerability is relatively straightforward to exploit (NVD).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate patches (KB5000807, KB5000803, KB5000809, KB5000822, KB5000808, KB5000802) for their specific Windows 10 version (Rapid7).