Exposures › CVE-2021-36934

CVE-2021-36934

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-02-10

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-36934

⌖ exploited in the wild shame 50/100 exploited-in-wild

If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.

Players implicated

Microsoft · vendor windows · product

Description

If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.

Affected FedRAMP products 4 in the catalog

Product	Provider	Status	Match
Azure Commercial Cloud	Microsoft	Authorized	vendor-exact · 0.90
Azure Government (includes Dynamics 365)	Microsoft	Authorized	vendor-exact · 0.90
Microsoft Office 365 GCC High	Microsoft	In Process	vendor-exact · 0.90
Office 365 Multi-Tenant & Supporting Services	Microsoft	Authorized	vendor-exact · 0.90