← KEV catalog
CISA known exploited vulnerability

CVE-2021-36934

Microsoft Windows SAM Local Privilege Escalation Vulnerability

SOURCE FACT

Microsoft · Windows

If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2021-36934

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?