What is the CVSS score of CVE-2021-43896?

CVE-2021-43896 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N. EPSS exploitation probability: 2.3%.

Is there a patch available for CVE-2021-43896?

Yes, a patch is available for CVE-2021-43896. Update the affected software to the latest version immediately.

Powershell CVE-2021-43896

MEDIUM

2021-12-15 secure@microsoft.com

Microsoft Information Disclosure Powershell

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

CVE Published

Dec 15, 2021 - 15:15 nvd

MEDIUM 5.5

DescriptionNVD

Microsoft PowerShell Spoofing Vulnerability

AnalysisAI

Microsoft PowerShell Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Technical ContextAI

Affected products include: Microsoft Powershell.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Powershell

View all

CVE-2018-8327 CRITICAL Act Now

9.8 Jul 11

A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code

CVE-2022-41076 HIGH This Week

8.5 Dec 13

PowerShell Remote Code Execution Vulnerability. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitab

CVE-2022-41121 HIGH This Week

7.8 Dec 13

Windows Graphics Component Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is l

CVE-2022-26788 HIGH This Week

7.8 Apr 15

PowerShell Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack comple

CVE-2025-30399 HIGH This Week

7.5 Jun 13

CVE-2025-30399 is an untrusted search path vulnerability in .NET and Visual Studio that allows unauthenticated remote at

CVE-2023-21538 HIGH This Week

7.5 Jan 10

.NET Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no aut

CVE-2022-23267 HIGH This Week

7.5 May 10

.NET and Visual Studio Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely e

CVE-2020-1108 HIGH This Week

7.5 May 21

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Cor

CVE-2020-0951 MEDIUM This Month

6.7 Sep 11

<p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an at

CVE-2023-36013 MEDIUM This Month

6.5 Nov 20

PowerShell Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploi

CVE-2020-8927 MEDIUM This Month

6.5 Sep 15

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of

CVE-2022-24512 MEDIUM This Month

6.3 Mar 09

.NET and Visual Studio Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.3), this vulnerability is remo

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2021-43896 vulnerability details – vuln.today

Back

Powershell CVE-2021-43896

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More in Powershell

Same technique Information Disclosure

Share

External POC / Exploit Code