CVE-2021-36934

A Windows SAM local privilege escalation vulnerability allowed any user to read the SAM file and escalate to SYSTEM level if a Volume Shadow Copy was available.

This vulnerability enabled local privilege escalation to SYSTEM level by reading the SAM file via Volume Shadow Copy, exposing critical credentials and allowing full system compromise. DIB organizations must ensure Volume Shadow Copy is disabled or restricted on systems handling sensitive data, as this flaw was actively exploited in the wild and represents a severe, avoidable failure in Windows hardening.

Shame score — A critical privilege escalation flaw in Windows that was actively exploited in the wild, allowing any user to escalate to SYSTEM level and access the SAM file, representing a severe, avoidable failure in Microsoft's hardening and patching practices.