CVE-2021-26414 is a medium-severity security vulnerability affecting various configurations of Microsoft Windows. This security feature bypass vulnerability impacts the Windows DCOM Server, potentially allowing unauthorized access to sensitive information. To exploit this vulnerability, user interaction is required, and it has not been publicly disclosed or exploited at the time of original publication.

How do I know if I'm affected?

To determine if you're affected by the vulnerability, you'll need to check if you're using any of the impacted Microsoft Windows versions. These include Windows 10, Windows 7, Windows 8.1, and various Windows Server editions. Keep in mind that user interaction is required for this security feature bypass vulnerability to be exploited.

What should I do if I'm affected?

If you're affected by the vulnerability, follow these steps to protect your system. First, install the security updates released by Microsoft. Next, enable RPC_C_AUTHN_LEVEL_PKT_INTEGRITY on DCOM clients. Finally, manually set RequireIntegrityActivationAuthenticationLevel = 1 on DCOM servers. This will help mitigate the vulnerability and safeguard your system.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2021-26414 vulnerability, also known as Windows DCOM Server Security Feature Bypass, is not listed in CISA's Known Exploited Vulnerabilities Catalog. It was published on June 8, 2021, and involves a security feature bypass in Windows DCOM servers. To protect against this vulnerability, users should install the security updates released by Microsoft.

Weakness enumeration

The weakness enumeration for is categorized as "Insufficient Information" with the CWE-ID NVD-CWE-noinfo, indicating limited details about the vulnerability's nature.

For more details

CVE-2021-26414, a medium-severity Windows DCOM Server Security Feature Bypass vulnerability, affects various Microsoft Windows configurations. Users can protect their systems by installing security updates and following recommended mitigation steps. For a comprehensive understanding of the vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• NVD - CVE-2021-26414

• Windows DCOM Server Security Feature Bypass

• Windows Kerberos AppContainer Enterprise Authentication Capability Bypass