CVE-2021-43893

mediumpriority · track · 42EPSS 0.067 · 94 %ileexploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

6.72% (94th) EPSS

CVSS 6 · medium

Is it mine?

100 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6–7.5

v2.06mediumAV:N/AC:M/Au:S/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 6.8 · impact 6.4

v3.17.5highCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.6 · impact 5.9

v3.17.5highAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Csecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · secure@microsoft.com USexploitability 1.6 · impact 5.9

v3.17.1highCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-668USprimaryCWE-269US

exploits (1)

Public proof-of-concept and weaponised exploit code.

jbaines-r7/blankspaceProof of Concept for EFSRPC Arbitrary File Upload (CVE-2021-43893)PoC · poc_in_github

affected products (100)

Products and version ranges known to be affected.

Microsoft Windows 10all versionscert_bundDEcpe:/o:microsoft:windows_10:-
Microsoft Windows 10 Version 1607all versionscert_bundDEcpe:/o:microsoft:windows_10:version_1607
Microsoft Windows 10 Version 1809all versionscert_bundDEcpe:/o:microsoft:windows_10:version_1809
Microsoft Windows 10 Version 1909all versionscert_bundDEcpe:/o:microsoft:windows_10:version_1909
Microsoft Windows 10 Version 2004all versionscert_bundDEcpe:/o:microsoft:windows_10:version_2004
Microsoft Windows 10 Version 20H2all versionscert_bundDEcpe:/o:microsoft:windows_10:version_20h2
Microsoft Windows 10 Version 21H1all versionscert_bundDEcpe:/o:microsoft:windows_10:version_21h1
Microsoft Windows 10 Version 21H2all versionscert_bundDEcpe:/o:microsoft:windows_10:version_21h2
Microsoft Windows 11all versionscert_bundDEcpe:/o:microsoft:windows_11:-
Microsoft Windows 7 SP1all versionscert_bundDEcpe:/o:microsoft:windows_7:sp1
Microsoft Windows 8.1all versionscert_bundDEcpe:/o:microsoft:windows_8.1:-
Microsoft Windows RT 8.1all versionscert_bundDEcpe:/o:microsoft:windows_rt_8.1:-
Microsoft Windows Server 2008 R2 SP1all versionscert_bundDEcpe:/o:microsoft:windows_server_2008_r2:sp_1
Microsoft Windows Server 2008 SP2all versionscert_bundDEcpe:/o:microsoft:windows_server_2008:sp2:x64
Microsoft Windows Server 2012all versionscert_bundDEcpe:/o:microsoft:windows_server_2012:::server_core_installation
Microsoft Windows Server 2012 R2all versionscert_bundDEcpe:/o:microsoft:windows_server_2012_r2:-
Microsoft Windows Server 2016all versionscert_bundDEcpe:/o:microsoft:windows_server_2016:server_2016:r2
Microsoft Windows Server 2019all versionscert_bundDEcpe:/o:microsoft:windows_server_2019:server_core_installation
Microsoft Windows Server 2022all versionscert_bundDEcpe:/o:microsoft:windows_server_2022:-
Microsoft Windows Server version 2004all versionscert_bundDE

showing 20 of 100

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2025-2220Microsoft Windows und Microsoft Windows Server: Mehrere SchwachstellenDeutsch2021-12-14csaf · cert_bundDE
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft Windows und Microsoft Windows Server ausnutzen, um einen Denial of Service Zustand zu verursachen, seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen und beliebigen Code auszuführen.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund NVD CVE.org MITRE

published 2021-12-15modified 2026-06-17

related (949)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2024-38112US	—OT critical	84.2% (100th)	KEV	2024-07-09
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-21410US	—OT critical	12.7% (96th)	KEV	2024-02-13
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-35211US	critical10.0OT critical	91.2% (100th)	KEV	2021-07-14
Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may b…
CVE-2022-39952US	critical9.8	99.8% (100th)	Exploit	2023-02-16
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.…
CVE-2014-9222US	high10.0	74.0% (99th)	Exploit	2014-12-24
AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that…

+944 more

references (10)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan