CVE-2021-36934

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 67,3%

Kerentanan pada microsoft windows 10 1809, microsoft windows 10 1909 +3 lainnya. Skor CVSS 3.1 7.8 (High) menurut microsoft.com. Masuk katalog KEV CISA pada 10 Februari 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. An attacker must have the ability to execute code on a victim system to exploit this vulnerability. After installing this security update, you must manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. Simply installing this security update will not fully mitigate this vulnerability. See KB5005357- Delete Volume Shadow Copies.

Rincian

Terbit di NVD

22 Juli 2021

Terakhir diubah

10 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber microsoft.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

67,3% peluang dieksploitasi; lebih tinggi dari 99,2% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Microsoft Windows SAM Local Privilege Escalation Vulnerability

Masuk KEV

10 Februari 2022

Tenggat CISA

24 Februari 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 patch · advisory vendor
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36934 patch · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36934 pemerintah AS
• http://packetstormsecurity.com/files/164006/HiveNightmare-AKA-SeriousSAM.html advisory pihak ketiga · vdb entry
• https://www.kb.cert.org/vuls/id/506989 advisory pihak ketiga