cve-2021-36934

HIGH CVSS 7.8 cisa_known_exploited
Description

If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.

Timeline
Published
2022-02-10
Last Modified
2022-02-10
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 7.8,
  "datePublished": "2022-02-10",
  "dateUpdated": "2022-02-10",
  "description": "If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.",
  "dueDate": "2022-02-24",
  "id": "CVE-2021-36934",
  "kev_catalogs": [
    "cisa"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://nvd.nist.gov/vuln/detail/CVE-2021-36934",
  "product": "Windows",
  "requiredAction": "Apply updates per vendor instructions.",
  "severity": "HIGH",
  "source": "cisa_known_exploited",
  "title": "Microsoft Windows SAM Local Privilege Escalation Vulnerability",
  "vendor": "Microsoft"
}
Enrichment data
View JSON API Download JSON