CVE-2021-36934

HIGHCVSS 7.8Known Exploited

CISA Known Exploited Vulnerability

https://nvd.nist.gov/vuln/detail/CVE-2021-36934

Remediation deadline: February 24, 2022

Description

If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.

Timeline

Published:July 22nd, 2021 7:15 AM

Last modified:August 10th, 2026 8:19 PM

Added to KEV:February 10th, 2022

CVSS Scoring

CVSS v3: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2: 4.6

Affected Software

From NVD CPE configuration data

Vendors

microsoft

Products

windows_10_1809windows_10_1909windows_10_2004windows_10_20h2windows_10_21h1

References & Reports

Advisories, patches, and third-party reports

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934Patch
http://packetstormsecurity.com/files/164006/HiveNightmare-AKA-SeriousSAM.htmlThird Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36934Patch
https://www.kb.cert.org/vuls/id/506989Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36934US Government Resource

Source: NIST NVD · Data may lag official sources by up to one minute