Log in Start free

Actively exploited · Published Jul 22, 2021 · Assigned by microsoft

CVE-2021-36934Windows Elevation of Privilege Vulnerability

High 7.8 Exploited

In plain English

A high-severity security flaw in Windows 10 Version 1809 from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on February 10, 2022). The chance it is exploited in the next 30 days is estimated at 67.3% (higher than 99.3% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, public proof-of-concept code. Apply updates per vendor instructions.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)67.3%top 0.7% of all CVEs
Exploited in the wildYesCISA KEV since Feb 10, 2022
Attack tooling2Metasploit, Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Feb 24, 2022.

Official description

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. An attacker must have the ability to execute code on a victim system to exploit this vulnerability. After installing this security update, you must manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. Simply installing this security update will not fully mitigate this vulnerability. See KB5005357- Delete Volume Shadow Copies.

Affected products (as reported)

VendorProductVersions
Microsoft Windows 10 Version 1809 10.0.17763.0 – before 10.0.17763.2114
Microsoft Windows 10 Version 1809 10.0.0 – before 10.0.17763.2114
Microsoft Windows 10 Version 1909 10.0.0 – before 10.0.18363.1734
Microsoft Windows 10 Version 2004 10.0.0 – before 10.0.19041.1165
Microsoft Windows 10 Version 20H2 10.0.0 – before 10.0.19042.1165
Microsoft Windows 10 Version 21H1 10.0.0 – before 10.0.19043.1165

References