CVE-2021-36934

Microsoft Windows SAM Local Privilege Escalation Vulnerability

Windows 10 1809

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. An attacker must have the ability to execute code on a victim system…

22. Jul 2021

Ausgewertete Quellen

• Microsoft
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934
• Microsoft
  https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36934
• Hinweis
  http://packetstormsecurity.com/files/164006/HiveNightmare-AKA-SeriousSAM.html
• Hinweis
  https://www.kb.cert.org/vuls/id/506989
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36934
• CISA
  Microsoft Windows SAM Local Privilege Escalation Vulnerability
• NVD
  CVE-2021-36934