CVE-2021-31956 | Netskope Threat Labs

Description

This detection identifies exploitation attempts targeting CVE-2021-31956, which has a HIGH severity rating. Microsoft's advisory names this issue the Windows NTFS Elevation of Privilege Vulnerability, which lets a local cyberattacker gain elevated privileges on a target system.

Stats

First seen: May 2022
Last seen: September 2026

CVEs

CVE-2021-31956

Alert name variants

Alert Name	Engine
Win64.Exploit.CVE-2021-31956	ATP Sandbox Adv. Heuristics

Related IPS Signatures

Signature Name	Engine
OS-WINDOWS Windows NTFS elevation of privilege attempt	IPS-SWG

References

nvd.nist.gov