CVE-2021-36934—Microsoft Windows SAM Local Privilege Escalation Vulnerability

漏洞名称

Microsoft Windows SAM Local Privilege Escalation Vulnerability

描述

If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2021-36934

相关 CWE

• CWE-1220