Exploit for CVE-2021-26871

githubexploit · 2021-03-25

Description

CVE-2021-26871 is a type confusion in Wallet service; apply patches and disable risky features.

Affected Microsoft Windows 10 versions

Microsoft Windows 10 All versions

All known vulnerabilities by product

Walletservice Windows

CVSS 7.8 for CVE-2021-26871

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

42%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

1.3%higher than 66.3% of all CVEs

Updated 2026-06-16

CVE Information

CVE-2021-26871

Exploit Details

Modified:2024-08-12 20:11

Last Seen:2025-08-31 23:33

Reporter:fr4nkxixi

Written in:C

Last commit:2021-03-25

Other exploits for CVE-2021-26871

Exploit for CVE-2021-26871

2021-03-25 robotMD5GITHUB

Exploit Code

README5 lines

## https://sploitus.com/exploit?id=DEBC701F-4C31-5337-B792-17C27F97AD7F
# CVE-2021-26871_POC
POC for CVE-2021-26871(Maybe)

"PROPVARIANT" type confusion in WalletService

Exploit Code

Share

Share on social media: