CVE-2021-31958: 
vulnerability analysis and mitigation

CVE-2021-31958 is a Windows NTLM Elevation of Privilege Vulnerability that was disclosed on June 8, 2021. This vulnerability affects various versions of Microsoft Windows, including Windows 10, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019 (MITRE CVE).

The vulnerability is related to Event Tracing for Windows (ETW) and affects certain legacy Event Logging APIs. It has been assigned a CVSS score of 7.0, indicating a moderate severity level with network vector access, medium attack complexity, and no authentication required (AV:N/AC:M/Au:N/C:P/I:P/A:P) (Rapid7).

When exploited, this vulnerability could allow an attacker to gain elevated privileges on affected systems. Applications accessing event logs on remote devices might be unable to connect, resulting in errors such as 'Error 5: access is denied' or 'Error 1764: The requested operation is not supported' (Microsoft Support).

Microsoft has released security updates to address this vulnerability. The issue is resolved when both local and remote devices have installed updates released June 8, 2021 or later. Multiple security updates are available depending on the Windows version, including KB5003687, KB5003638, KB5003646, KB5003635, KB5003637, KB5003696, and KB5003681 (Rapid7).