Every CVESearch/Get API key

CVE-2021-42274

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

6.8 Medium

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.69%Up 0.2 points since Nov 10, 2021
90%50%10%1%

What each source reports

CVE List Score used6.8

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

Record
CVE-2021-42274
CVSS 3.1
6.8 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
Updated
2026-11-02
EUVDEUVD-2021-292506.8

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

Record
EUVD-2021-29250
CVSS 3.1
6.8 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-pxcr-f852-7w3r6.8

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

Record
GHSA-pxcr-f852-7w3r
CVSS 3.1
6.8 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
NVD6.8

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

Record
CVE-2021-42274
CVSS 3.1
6.8 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02

Affected products

Show 2 moreShow less

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-42274 is a medium vulnerability (CVSS 6.8) in Microsoft Windows 10 Version 1607, published November 10, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.69%, the 53rd percentile. No source names a fixed version.

References

MoveEnter Open