Back to Database
Status published
High
CVE-2021-44900
Micro-Star International (MSI) App Player <= 4.280.1.6309 is vulnerable to...
Vulnerability Description
Micro-Star International (MSI) App Player <= 4.280.1.6309 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in the NTIOLib_X64.sys and BstkDrv_msi2.sys drivers components. All the vulnerabilities are triggered by sending specific IOCTL requests.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-44900
Credits & Attribution
No credits recorded in the NVD database.
More from msi
View All →CVE-2022-38532
Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to...
High
7.8
CVE-2022-34110
An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows...
Medium
5.5
CVE-2022-34109
An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows...
High
7.1
CVE-2022-34108
An issue in the Feature Navigator of Micro-Star International MSI...
High
7.1
CVE-2022-31877
An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0...
Unknown
0
Affected Vendor
Affected Software
app player
Vulnerable Versions:
0
Timeline
Official Publish:
February 4th, 2022
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.