Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mscveMicrosoftMS:CVE-2021-36934
HistoryJul 20, 2021 - 7:00 a.m.

Windows Elevation of Privilege Vulnerability

2021-07-2007:00:00
Microsoft
msrc.microsoft.com
62
vulnerability
windows
access control lists
sam database
arbitrary code
system privileges
exploit
shadow copies

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

74.3%

JSON

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

An attacker must have the ability to execute code on a victim system to exploit this vulnerability.

After installing this security update, you must manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. Simply installing this security update will not fully mitigate this vulnerability. See KB5005357- Delete Volume Shadow Copies.

Affected configurations

Vulners
Node
microsoftwindows_10_20h2Range<10.0.19042.1165arm64
OR
microsoftwindows_10_20h2Range<10.0.19042.1165
OR
microsoftwindows_10_20h2Range<10.0.19042.1165x64
OR
microsoftwindows_10_2004Range<10.0.19041.1165
OR
microsoftwindows_10_2004Range<10.0.19041.1165
OR
microsoftwindows_10_2004Range<10.0.19041.1165
OR
microsoftwindows_10_21h1Range<10.0.19043.1165
OR
microsoftwindows_10_21h1Range<10.0.19043.1165arm64
OR
microsoftwindows_10_21h1Range<10.0.19043.1165x64
OR
microsoftwindows_10_1909Range<10.0.18363.1734
OR
microsoftwindows_10_1909Range<10.0.18363.1734
OR
microsoftwindows_10_1909Range<10.0.18363.1734
OR
microsoftwindows_10_1809Range<10.0.17763.2114arm64
OR
microsoftwindows_10_1809Range<10.0.17763.2114x64
OR
microsoftwindows_10_1809Range<10.0.17763.2114
VendorProductVersionCPE
microsoftwindows_10_20h2*cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*
microsoftwindows_10_20h2*cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*
microsoftwindows_10_20h2*cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*
microsoftwindows_10_2004*cpe:2.3:o:microsoft:windows_10_2004:*:*:*:*:*:*:*:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:arm64:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:x64:*
microsoftwindows_10_1909*cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:*:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
Rows per page:
1-10 of 111

Related

githubexploit 19
cisa_kev 1
cvelist 1
openvas 1
kaspersky 2
rapid7blog 6
metasploit 1
thn 3
malwarebytes 1
cnvd 1
nvd 1
threatpost 2
cve 1
attackerkb 1
prion 1
veeam 1
cert 1
avleonov 2
cisa 1
securelist 1
mskb 3
qualysblog 1
githubexploit
githubexploit
Exploit for Incorrect Permission Assignment for Critical Resource in Microsoft
2021-07-25 18:00:35
Exploit for Incorrect Permission Assignment for Critical Resource in Microsoft
2021-08-10 19:39:28
Exploit for Improper Privilege Management in Microsoft
2021-07-22 07:49:29
cisa_kev
cisa_kev
Microsoft Windows SAM Local Privilege Escalation Vulnerability
2022-02-10 00:00:00
cvelist
cvelist
CVE-2021-36934 Windows Elevation of Privilege Vulnerability
2021-07-22 07:05:12
openvas
openvas
Microsoft Windows Elevation of Privilege Vulnerability (HiveNightmare, SeriousSAM)
2021-10-26 00:00:00
kaspersky
kaspersky
KLA12242 PE vulnerability in Microsoft Windows
2021-07-20 00:00:00
KLA12239 PE vulnerability in Microsoft Windows
2021-07-20 00:00:00
rapid7blog
rapid7blog
Microsoft SAM File Readability CVE-2021-36934: What You Need to Know
2021-07-21 16:01:19
Ongoing Exploitation of Windows Installer CVE-2021-41379
2021-11-30 19:03:28
Metasploit Wrap-Up
2021-07-30 18:04:33
metasploit
metasploit
Windows SAM secrets leak - HiveNightmare
2021-07-29 15:54:31
thn
thn
How to Mitigate Microsoft Windows 10, 11 SeriousSAM Vulnerability
2021-07-26 11:21:00
Russian APT Hackers Used COVID-19 Lures to Target European Diplomats
2022-02-09 10:46:00
New Windows and Linux Flaws Give Attackers Highest System Privileges
2021-07-21 06:37:00
malwarebytes
malwarebytes
HiveNightmare zero-day lets anyone be SYSTEM on Windows 10 and 11
2021-07-21 14:31:50
cnvd
cnvd
Microsoft Windows Access Control Error Vulnerability
2021-07-23 00:00:00
nvd
nvd
CVE-2021-36934
2021-07-22 07:15:11
threatpost
threatpost
Microsoft Issues Windows 10 Workaround Fix for ‘SeriousSAM’ Bug
2021-07-22 12:57:11
Unpatched Windows 10 Zero-Day Allows Privileged File Access
2021-11-29 17:47:10
cve
cve
CVE-2021-36934
2021-07-22 07:15:11
attackerkb
attackerkb
CVE-2021-36934 Windows Elevation of Privilege
2021-07-22 00:00:00
prion
prion
Privilege escalation
2021-07-22 07:15:00
veeam
veeam
Veeam Best Practices regarding CVE-2021-36934
2021-11-01 00:00:00
cert
cert
Microsoft Windows 10 gives unprivileged user access to system32\config files
2021-07-20 00:00:00
avleonov
avleonov
Last Week’s Security news: Pegasus, SeriousSAM, Sequoia
2021-07-26 16:46:10
Last Week’s Security news: Serious Sam in Metasploit, PetitPotam, Zimbra Hijack, Joint Advisory TOP30 CVEs
2021-08-02 19:48:50
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-02-10 00:00:00
securelist
securelist
IT threat evolution in Q3 2021. PC statistics
2021-11-26 12:00:36
mskb
mskb
August 10, 2021—KB5005031 (OS Build 18363.1734)
2021-08-10 07:00:00
August 10, 2021—KB5005030 (OS Build 17763.2114)
2021-08-10 07:00:00
August 10, 2021—KB5005033 (OS Builds 19041.1165, 19042.1165, and 19043.1165)
2021-08-10 07:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

74.3%

JSON
Related for MS:CVE-2021-36934
githubexploit19cisa_kev1cvelist1openvas1kaspersky2rapid7blog6metasploit1thn3malwarebytes1cnvd1nvd1threatpost2cve1attackerkb1prion1veeam1cert1avleonov2cisa1securelist1mskb3qualysblog1