In short
- CVE-2021-32559 is a MEDIUM (CVSS 6.5) vulnerability affecting pywin32, pywin32 (mhammond).
- Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.7% of all vulnerabilities.
- Fix: update to 301 or later.
| Package | Affected versions | Patched versions |
|---|
| pywin32 PyPI | < 301
| 301
|
| pywin32 | < 301
| 301
|
Description
An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes. An attacker who successfully exploited this vulnerability could crash the vulnerable process.
NVD description
An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes. An attacker who successfully exploited this vulnerability could crash the vulnerable process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free