CISA known exploited vulnerability

CVE-2021-31201

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

SOURCE FACT

Microsoft · Enhanced Cryptographic Provider

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

Apply updates per vendor instructions.

https://nvd.nist.gov/vuln/detail/CVE-2021-31201

CHECK YOUR OUTSIDE-IN INVENTORY