Vendor / Project: Microsoft Product: Windows Description: If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level. Required Action: Apply updates per vendor instructions. Due Date: 2022-02-24 Ransomware Campaign Use: Unknown CWEs: CWE-1220 Notes: https://nvd.nist.gov/vuln/detail/CVE-2021-36934
CVE-2021-36934 — Microsoft Windows SAM Local Privilege Escalation Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-02-10 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 7.8
- Quelle-ID:
cisa_kev - uid_hash:
dd53df56482db90e04ebcf8aad780593220a3f4ca587043c07dd91b549e9bb71
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
7.8 |
HIGH |
7.8 |
2021-07-22 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |