{
  "cveId": "CVE-2021-36934",
  "url": "https://patchblox.com/security/cve/CVE-2021-36934",
  "summary": "CVE-2021-36934 is fixed in 15 products on 1 platform, first by KB5005030, released August 10, 2021. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on February 10, 2022. Patch Radar priority: Patch now.",
  "title": "Windows Elevation of Privilege Vulnerability",
  "description": "\u003Cp\u003EAn elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\u003C/p\u003E\n\u003Cp\u003EAn attacker must have the ability to execute code on a victim system to exploit this vulnerability.\u003C/p\u003E\n\u003Cp\u003EAfter installing this security update, you \u003Cem\u003Emust\u003C/em\u003E manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. \u003Cstrong\u003ESimply installing this security update will not fully mitigate this vulnerability.\u003C/strong\u003E See \u003Ca href=\u0022https://support.microsoft.com/topic/1ceaa637-aaa3-4b58-a48b-baf72a2fa9e7\u0022\u003EKB5005357- Delete Volume Shadow Copies\u003C/a\u003E.\u003C/p\u003E",
  "published": "2021-07-20T12:00:00Z",
  "severity": "Important",
  "cvss": 7.8,
  "epss": 0.67252,
  "epssPercentile": 0.99308,
  "priority": "Patch now",
  "priorityTier": 1,
  "exploited": true,
  "vendorExploited": false,
  "disclosed": true,
  "exploitabilityAssessment": "Exploitation More Likely",
  "kev": {
    "added": "2022-02-10T00:00:00Z",
    "due": "2022-02-24T00:00:00Z",
    "ransomware": false,
    "requiredAction": "Apply updates per vendor instructions."
  },
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1809 for 32-bit Systems",
      "fixedVersion": "17763.2114",
      "fix": "KB5005030",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005030",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1809 for ARM64-based Systems",
      "fixedVersion": "17763.2114",
      "fix": "KB5005030",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005030",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1809 for x64-based Systems",
      "fixedVersion": "17763.2114",
      "fix": "KB5005030",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005030",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1909 for 32-bit Systems",
      "fixedVersion": "18363.1734",
      "fix": "KB5005031",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005031",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1909 for ARM64-based Systems",
      "fixedVersion": "18363.1734",
      "fix": "KB5005031",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005031",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1909 for x64-based Systems",
      "fixedVersion": "18363.1734",
      "fix": "KB5005031",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005031",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 2004 for 32-bit Systems",
      "fixedVersion": "",
      "fix": "KB5005033",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005033",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 2004 for ARM64-based Systems",
      "fixedVersion": "",
      "fix": "KB5005033",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005033",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 2004 for x64-based Systems",
      "fixedVersion": "",
      "fix": "KB5005033",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005033",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 20H2 for 32-bit Systems",
      "fixedVersion": "",
      "fix": "KB5005033",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005033",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 20H2 for ARM64-based Systems",
      "fixedVersion": "",
      "fix": "KB5005033",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005033",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 20H2 for x64-based Systems",
      "fixedVersion": "",
      "fix": "KB5005033",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005033",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 21H1 for 32-bit Systems",
      "fixedVersion": "",
      "fix": "KB5005033",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005033",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 21H1 for ARM64-based Systems",
      "fixedVersion": "",
      "fix": "KB5005033",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005033",
      "released": "2021-08-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 21H1 for x64-based Systems",
      "fixedVersion": "",
      "fix": "KB5005033",
      "url": "https://patchblox.com/security/fix/microsoft/kb5005033",
      "released": "2021-08-10T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}