CVE-2021-31969

CVE Enrichment

CVSS: 7.8 HIGH
EPSS: 1.22%
EPSS Percentile: 68.63%
CISA KEV: Not listed

Description

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 09-Jun-2021 06:15
Last Modified: 17-Jun-2026 10:52
EPSS Date: 2026-11-02
CWE: CWE-269

CVSS Vector


            CVSS:3.1                            AV:L /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

CNA Products / Version Status

Microsoft · Windows 10 Version 1809 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.17763.1999 — affected (custom)

Platforms: 32-bit Systems, x64-based Systems, ARM64-based Systems
CPEs: cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:x86:*, cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:x64:*, cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:arm64:*
Microsoft · Windows 10 Version 1909 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.18363.1621 — affected (custom)

Platforms: 32-bit Systems, x64-based Systems, ARM64-based Systems
CPEs: cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.1621:*:*:*:*:*:x86:*, cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.1621:*:*:*:*:*:x64:*, cpe:2.3:o:microsoft:windows_10_1809:10.0.18363.1621:*:*:*:*:*:x64:*
Microsoft · Windows 10 Version 2004 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.19041.1052 — affected (custom)

Platforms: 32-bit Systems, ARM64-based Systems, x64-based Systems
CPEs: cpe:2.3:o:microsoft:windows_10_1809:10.0.19041.1052:*:*:*:*:*:x64:*
Microsoft · Windows 10 Version 20H2 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.19042.1052 — affected (custom)

Platforms: 32-bit Systems, ARM64-based Systems
CPEs: cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1052:*:*:*:*:*:x86:*, cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1052:*:*:*:*:*:arm64:*
Microsoft · Windows 10 Version 21H1 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.19043.1052 — affected (custom)

Platforms: x64-based Systems, ARM64-based Systems, 32-bit Systems
CPEs: cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:x64:*, cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:arm64:*, cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:x86:*
Microsoft · Windows Server 2019 (Server Core installation) Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.17763.1999 — affected (custom)

Platforms: x64-based Systems
CPEs: cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.1999:*:*:*:*:*:*:*
Microsoft · Windows Server 2019 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.17763.1999 — affected (custom)

Platforms: x64-based Systems
CPEs: cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.1999:*:*:*:*:*:*:*
Microsoft · Windows Server version 2004 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.19041.1052 — affected (custom)

Platforms: x64-based Systems
CPEs: cpe:2.3:o:microsoft:windows_server_2004:10.0.19041.1052:*:*:*:*:*:*:*
Microsoft · Windows Server version 20H2 Source: CNA · [email protected]
Default status: unknown

10.0.0 ≤ version < 10.0.19042.1052 — affected (custom)

Platforms: x64-based Systems
CPEs: cpe:2.3:o:microsoft:windows_server_20H2:10.0.19042.1052:*:*:*:*:*:*:*

Affected Products / Versions

microsoft / windows_10 Source: NVD CPE · affected
Version / affected range: 20h2
cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*
microsoft / windows_10 Source: NVD CPE · affected
Version / affected range: 21h1
cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:*
microsoft / windows_10 Source: NVD CPE · affected
Version / affected range: 1909
cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*
microsoft / windows_10 Source: NVD CPE · affected
Version / affected range: 2004
cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*
microsoft / windows_server_2016 Source: NVD CPE · affected
Version / affected range: 20h2
cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*
microsoft / windows_server_2016 Source: NVD CPE · affected
Version / affected range: 2004
cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*
microsoft / windows_server_2019 Source: NVD CPE · affected
Version / affected range: -
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

References

Last enrichment sync: 03-Nov-2026 19:52
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

STAR Labs documented a similar chain in their analysis of CVE-2021-31969 also in cldflt.sys. Rapid7 Details ModeloRAT Intrusion Using Teams Lure and CVE-2023-36036

CVE (1)

Malware (1)

Threat Actors (1)

MITRE ATT&CK (15)

Vendors (2)

Products (3)

Tools (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.