{"vulnerability": "cve-2021-24096", "sightings": [{"uuid": "5254d73a-8584-424d-86a9-e43b19dcd6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24096", "type": "seen", "source": "https://t.me/cibsecurity/24167", "content": "\u203c CVE-2021-24096 \u203c\n\nWindows Kernel Elevation of Privilege Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-26T02:38:27.000000Z"}, {"uuid": "a1e200bb-5a78-47e6-a09d-89346bba60ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24096", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3038", "content": "#Research\nNew vulnerabilities in Windows Server Containers: CVE-2021-24096, CVE-2021-26891,\u00a0CVE-2021-26865, CVE-2021-26864\nhttps://googleprojectzero.blogspot.com/2021/04/who-contains-containers.html", "creation_timestamp": "2021-04-02T11:01:09.000000Z"}, {"uuid": "2e8daa2a-a5a8-46e1-be6d-13248cc25cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24096", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2684", "content": "#exploit\nCVE-2021-24096:\nWindows10/Server 2004 - Server Silo Registry Key Symbolic Link EoP [1-day] (PoC)\n\n// MS Windows has a privilege escalation vulnerability. When a process is running in a server silo, the checks for trusted hive registry key symbolic links is disabled leading to elevation of privilege (EoP)...", "creation_timestamp": "2024-10-09T19:12:10.000000Z"}, {"uuid": "d0c55d77-9265-4d90-a23c-4c118d5edbc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24096", "type": "seen", "source": "https://t.me/cissp/2852", "content": "Malware analysis\n1. Avaddon RaaS\nhttps://labs.sentinelone.com/avaddon-raas-breaks-public-decryptor-continues-on-rampage\n2. BazarCall malware\nhttps://www.bleepingcomputer.com/news/security/bazarcall-malware-uses-malicious-call-centers-to-infect-victims\n3. Hancitor\u2019s Use of Cobalt Strike and a Noisy Network Ping Tool\nhttps://unit42.paloaltonetworks.com/hancitor-infections-cobalt-strike\n\nResearch\nNew vulnerabilities in Windows Server Containers: CVE-2021-24096, \ud83d\ude00CVE-2021-26891,\u00a0CVE-2021-26865, CVE-2021-26864\nhttps://googleprojectzero.blogspot.com/2021/04/who-contains-containers.html", "creation_timestamp": "2026-09-01T17:00:55.817262Z"}, {"uuid": "6d59eb3e-ca69-46a3-ad31-4553ee5202c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24096", "type": "seen", "source": "https://t.me/cissp/2852", "content": "Malware analysis\n1. Avaddon RaaS\nhttps://labs.sentinelone.com/avaddon-raas-breaks-public-decryptor-continues-on-rampage\n2. BazarCall malware\nhttps://www.bleepingcomputer.com/news/security/bazarcall-malware-uses-malicious-call-centers-to-infect-victims\n3. Hancitor\u2019s Use of Cobalt Strike and a Noisy Network Ping Tool\nhttps://unit42.paloaltonetworks.com/hancitor-infections-cobalt-strike\n\nResearch\nNew vulnerabilities in Windows Server Containers: CVE-2021-24096, \ud83d\ude00CVE-2021-26891,\u00a0CVE-2021-26865, CVE-2021-26864\nhttps://googleprojectzero.blogspot.com/2021/04/who-contains-containers.html", "creation_timestamp": "2026-09-02T01:04:46.343263Z"}, {"uuid": "b22a5688-ef56-4029-8ba4-7a2e8da9d53b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24096", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2852", "content": "Malware analysis\n1. Avaddon RaaS\nhttps://labs.sentinelone.com/avaddon-raas-breaks-public-decryptor-continues-on-rampage\n2. BazarCall malware\nhttps://www.bleepingcomputer.com/news/security/bazarcall-malware-uses-malicious-call-centers-to-infect-victims\n3. Hancitor\u2019s Use of Cobalt Strike and a Noisy Network Ping Tool\nhttps://unit42.paloaltonetworks.com/hancitor-infections-cobalt-strike\n\nResearch\nNew vulnerabilities in Windows Server Containers: CVE-2021-24096, \ud83d\ude00CVE-2021-26891,\u00a0CVE-2021-26865, CVE-2021-26864\nhttps://googleprojectzero.blogspot.com/2021/04/who-contains-containers.html", "creation_timestamp": "2026-09-11T11:00:03.790769Z"}, {"uuid": "3cb0174e-7132-486c-ba8b-01495dedf24f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24096", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2852", "content": "Malware analysis\n1. Avaddon RaaS\nhttps://labs.sentinelone.com/avaddon-raas-breaks-public-decryptor-continues-on-rampage\n2. BazarCall malware\nhttps://www.bleepingcomputer.com/news/security/bazarcall-malware-uses-malicious-call-centers-to-infect-victims\n3. Hancitor\u2019s Use of Cobalt Strike and a Noisy Network Ping Tool\nhttps://unit42.paloaltonetworks.com/hancitor-infections-cobalt-strike\n\nResearch\nNew vulnerabilities in Windows Server Containers: CVE-2021-24096, \ud83d\ude00CVE-2021-26891,\u00a0CVE-2021-26865, CVE-2021-26864\nhttps://googleprojectzero.blogspot.com/2021/04/who-contains-containers.html", "creation_timestamp": "2026-09-12T00:00:41.477352Z"}]}