What’s Vulnerable › Vulnerabilities

CVE-2021-27579

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-02-23 · updated 2026-06-17

Description

Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A privilege-escalation vulnerability exists if CPUID is enabled, and thus it should be disabled via configuration settings.

Affected products

• Snow Software Inventory Agent: from 5.3.1 through 6.7.0

References

• https://community.snowsoftware.com/s/feed/0D56900009cfHLDCA2
• https://community.snowsoftware.com/s/feed/0D56900009cfHLDCA2

Get alerted when CVE-2021-27579 or the next vulnerability affects your stack