fr Sign in

6.2 Medium

CVE-2021-26892 Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

Description

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
Windows 10 Version 1803 10.0	10.0.0 → < 10.0.17134.2087	10.0.17134.2087
Windows 10 Version 1809 10.0	10.0.0 → < 10.0.17763.1817	10.0.17763.1817
Windows Server 2019 10.0	10.0.17763.0 → < 10.0.17763.1817	10.0.17763.1817
Windows Server 2019 (Server Core installation) 10.0	10.0.17763.0 → < 10.0.17763.1817	10.0.17763.1817
Windows 10 Version 1909 10.0	10.0.0 → < 10.0.18363.1440	10.0.18363.1440
Windows Server, version 1909 (Server Core installation) 10.0	10.0.0 → < 10.0.18363.1440	10.0.18363.1440
Windows 10 Version 2004 10.0	10.0.0 → < 10.0.19043.867	10.0.19043.867
Windows Server version 2004 10.0	10.0.0 → < 10.0.19043.867	10.0.19043.867
Windows 10 Version 20H2 10.0	10.0.0 → < 10.0.19043.867	10.0.19043.867

Show the 4 other branches

Product	Affected versions	Fixed in
Windows Server version 20H2 10.0	10.0.0 → < 10.0.19043.867	10.0.19043.867
Windows 10 Version 1607 10.0	10.0.14393.0 → < 10.0.14393.4283	10.0.14393.4283
Windows Server 2016 10.0	10.0.14393.0 → < 10.0.14393.4283	10.0.14393.4283
Windows Server 2016 (Server Core installation) 10.0	10.0.14393.0 → < 10.0.14393.4283	10.0.14393.4283

References

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability msrc.microsoft.com

Timeline

Published March 11, 2021
Last modified August 19, 2026

The 623 CVEs of Windows 10 Version 1803 →

CVE-2021-31194 OLE Automation Remote Code Execution Vulnerability 8.8 High CVE-2021-31193 Windows SSDP Service Elevation of Privilege Vulnerability 7.8 High CVE-2021-31191 Windows Projected File System FS Filter Driver Information Disclosure Vulnerability 5.5 Medium CVE-2021-31188 Windows Graphics Component Elevation of Privilege Vulnerability 7.8 High

Track this CVE