Read the docs
TI-2021-18192 Aliases CVE-2021-41373GHSA-6g9p-wcw8-v467

FSLogix Information Disclosure Vulnerability

Priority LOW 26Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from Microsoft.

Summary

FSLogix Information Disclosure Vulnerability

Why it matters now

EPSS 0.00814 57th percentileScored 2026-11-07
Fix Fixed FSLogix (Microsoft): 2.9.7979.62170

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftFSLogix2.0.0.0 to before 2.9.7979.621702.9.7979.62170Patch availableCNA
  • FSLogix VendorMicrosoft Affected 2.0.0.0 to before 2.9.7979.62170 Fixed in 2.9.7979.62170 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:microsoft:fslogix:*:*:*:*:*:*:*:*before 2.9.7979.62170VulnerableMicrosoft
  • cpe:2.3:a:microsoft:fslogix:*:*:*:*:*:*:*:* Versions before 2.9.7979.62170 Vulnerable ·Microsoft

Remediation

  • Fix · CNA FSLogix (Microsoft) Fixed in 2.9.7979.62170

Vendor assessments

Microsoft

Microsoft's page for this CVE →

Impact
Information Disclosure
Exploited
No
Publicly disclosed
No
Exploitability
Exploitation Less Likely
ProductStatusPlan or fix
FSLogixFixed 2.9.7979.62170 · Security Update

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-41373
  2. 2026-10-03 Alias added: GHSA-6g9p-wcw8-v467

References

Patch 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences