CVE-2021-43638

Amazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

• CWE-190

• https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/Exploit, Technical Description, Third Party Advisory
• https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/Exploit, Technical Description, Third Party Advisory

Published

Dec 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43630Projectworlds Hospital Management System v1.0 is vulnerable …8.8
• CVE-2021-43631Projectworlds Hospital Management System v1.0 is vulnerable …9.8
• CVE-2021-43633Sourcecodester Messaging Web Application 1.0 is vulnerable t…5.4
• CVE-2021-43635A Cross Site Scripting (XSS) vulnerability exists in Codex b…6.1
• CVE-2021-43636Two Buffer Overflow vulnerabilities exists in T10 V2_Firmwar…9.8
• CVE-2021-43637Amazon WorkSpaces agent is affected by Buffer Overflow. IOCT…8.8
• CVE-2021-4364The JobSearch WP Job Board plugin for WordPress is vulnerabl…4.3
• CVE-2021-4365The Frontend File Manager plugin for WordPress is vulnerable…6.1
• CVE-2021-43650WebRun 3.6.0.42 is vulnerable to SQL Injection via the P_0 p…9.8
• CVE-2021-43657A Stored Cross-site scripting (XSS) vulnerability via MAster…5.4
• CVE-2021-43659In halo 1.4.14, the function point of uploading the avatar, …5.4
• CVE-2021-4366The PWA for WP & AMP plugin for WordPress is vulnerable to a…4.3