CVE-2021-36934

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Windows

Date Added 2022-02-10

Remediation Due 2022-02-24

https://nvd.nist.gov/vuln/detail/CVE-2021-36934

Affected Software (5)

Vendor	Product	Version
microsoft	windows_10_1809	< 10.0.17763.2114
microsoft	windows_10_1909	< 10.0.18363.1734
microsoft	windows_10_2004	< 10.0.19041.1165
microsoft	windows_10_20h2	< 10.0.19042.1165
microsoft	windows_10_21h1	< 10.0.19043.1165