CVE-2021-27579

CVE-2021-27579 describes a privilege escalation vulnerability in Snow Inventory Agent through version 6.7.0 on Windows. This flaw arises when the agent's CPUID feature, used for processor reporting, is enabled, allowing a local attacker to gain elevated privileges. With a CVSS score of 7.8 (High), the vulnerability presents a significant risk with high impact on confidentiality, integrity, and availability, requiring only low privileges and local access. There is no evidence of active exploitation, nor are there known public exploits or Metasploit modules available, though one community discussion highlights potential widespread risk.