CVE-2021-43637

HIGH 8.8CVE-2021-43637 · Published 07/12/2021 · updated 17/06/2026

In short

CVE-2021-43637 is a HIGH (CVSS 8.8) vulnerability affecting workspaces (amazon).
Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.4% of all vulnerabilities.
Fix: update to 1.0.1.1537 or later.

Package	Affected versions	Patched versions
workspaces amazon	`< 1.0.1.1537`	`1.0.1.1537`

Description

Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

References

sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services · Exploit

More vulnerabilities in workspaces

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free