CVE-2026-21709: A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.

Description

A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.

Vendor	Product	Versions
veeam	backup and replication	12, 13

Tier C

VulDB41d ago

→ No new info (linked only)

CVSS 3.16.7 MEDIUM

VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

12.3.213.0.1

CWECWE-77

PublishedApr 17, 2026

Last enriched41d agov2

Trending Score0

Source articles1

Independent1

Info Completeness8/14

Missing: cvss, epss, kev, exploit, iocs, mitre_attack

Last enriched 41d ago

v2Tier C41d ago

Updated severity to CRITICAL, corrected exploit availability to false, and provided a more detailed description of the vulnerability.

descriptionseverity

via VulDB

v141d ago

Initial creation